CVE-2022-48852: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48852 affects the Linux kernel's DRM (Direct Rendering Manager) VC4 HDMI driver. The vulnerability was discovered and disclosed on July 16, 2024. The issue occurs when the HDMI codec device is registered during bind but not unregistered during unbind, leading to a device leakage (NVD).

The vulnerability exists in the Linux kernel's DRM VC4 HDMI driver where the HDMI codec device registration process is incomplete. During the bind operation, the driver registers the HDMI codec device, but fails to unregister it during the unbind operation. This oversight results in a device resource leakage. The vulnerability has been assigned a CVSS v3.1 base score of 3.3 (LOW) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (NVD).

The impact of this vulnerability is relatively low, primarily affecting system resource management. The device leakage could potentially lead to resource exhaustion over time, though the actual impact is limited due to the local nature of the vulnerability and the requirement for privileged access (NVD).

The vulnerability has been patched in the Linux kernel. The fix involves adding proper unregistration of the HDMI codec device during the unbind operation. The patch adds a new vc4hdmiaudio_exit function that handles the unregistration of the codec device (Kernel Patch).