{"id":"DEBIAN-CVE-2022-50426","details":"In the Linux kernel, the following vulnerability has been resolved:  remoteproc: imx_dsp_rproc: Add mutex protection for workqueue  The workqueue may execute late even after remoteproc is stopped or stopping, some resources (rpmsg device and endpoint) have been released in rproc_stop_subdevices(), then rproc_vq_interrupt() accessing these resources will cause kennel dump.  Call trace:  virtqueue_add_split+0x1ac/0x560  virtqueue_add_inbuf+0x4c/0x60  rpmsg_recv_done+0x15c/0x294  vring_interrupt+0x6c/0xa4  rproc_vq_interrupt+0x30/0x50  imx_dsp_rproc_vq_work+0x24/0x40 [imx_dsp_rproc]  process_one_work+0x1d0/0x354  worker_thread+0x13c/0x470  kthread+0x154/0x160  ret_from_fork+0x10/0x20  Add mutex protection in imx_dsp_rproc_vq_work(), if the state is not running, then just skip calling rproc_vq_interrupt().  Also the flush workqueue operation can't be added in rproc stop for the same reason. The call sequence is  rproc_shutdown -\u003e rproc_stop    -\u003erproc_stop_subdevices    -\u003erproc-\u003eops-\u003estop()      -\u003eimx_dsp_rproc_stop        -\u003eflush_work          -\u003e rproc_vq_interrupt  The resource needed by rproc_vq_interrupt has been released in rproc_stop_subdevices, so flush_work is not safe to be called in imx_dsp_rproc_stop.","modified":"2026-08-27T23:04:31.747931136Z","published":"2025-10-01T12:15:34.120Z","upstream":["CVE-2022-50426"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2022-50426"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50426.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50426.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2022-50426.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}