CVE-2022-48778 in Linux
Summary
by MITRE • 07/16/2024
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: gpmi: don't leak PM reference in error path
If gpmi_nfc_apply_timings() fails, the PM runtime usage counter must be dropped.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/11/2026
The vulnerability identified as CVE-2022-48778 resides within the Linux kernel's MTD (Memory Technology Device) subsystem, specifically affecting the raw NAND flash controller driver known as gpmi_nfc. This issue represents a resource management flaw that occurs during the execution of NAND flash timing configuration operations. The problem manifests when the gpmi_nfc_apply_timings() function encounters an error condition, failing to properly release a power management runtime reference that was previously acquired. This class of vulnerability falls under the broader category of resource leak defects, which are commonly classified as CWE-404: Improper Resource Release or Incomplete Cleanup within the Common Weakness Enumeration framework.
The technical flaw occurs in the error handling path of the gpmi_nfc driver implementation where proper cleanup procedures are not followed when timing configuration fails. During normal operation, the driver acquires a power management runtime reference to ensure the hardware remains powered during critical operations. However, when gpmi_nfc_apply_timings() returns an error status, the driver fails to decrement the PM runtime usage counter through the appropriate release mechanism. This results in the reference count remaining incremented indefinitely, effectively preventing the system from entering low power states or powering down the NAND controller hardware. The operational impact of this resource leak can manifest as increased power consumption, reduced battery life on mobile devices, and potential system instability due to improper resource management.
The implications of this vulnerability extend beyond simple power management issues as it represents a failure in proper error handling within a critical kernel subsystem. The gpmi_nfc driver operates at a low level within the storage stack, interfacing directly with NAND flash hardware that many systems rely upon for persistent storage. When the PM reference counter leaks, it creates a situation where the system cannot properly manage power states for the affected hardware component, potentially leading to unnecessary power drain on battery-powered devices such as embedded systems, mobile phones, or IoT devices. This vulnerability directly impacts the kernel's ability to perform proper power management operations and can contribute to overall system performance degradation.
Mitigation strategies for this vulnerability require kernel-level patches that ensure proper error handling and resource cleanup. The fix involves modifying the error path in the gpmi_nfc driver to include explicit release of the PM runtime reference when gpmi_nfc_apply_timings() fails. System administrators and device manufacturers should apply the relevant kernel updates that contain this patch, as the vulnerability cannot be addressed through user-space configuration changes. Organizations implementing embedded systems or mobile devices should prioritize updating their kernel versions to include this fix, particularly in environments where power efficiency and system stability are critical requirements. The vulnerability demonstrates the importance of proper resource management in kernel drivers and aligns with ATT&CK technique T1547.001: Registry Run Keys / Startup Folder which emphasizes the need for proper system resource handling to maintain operational integrity and prevent unintended system behaviors that could compromise performance or security.