CVE-2022-49265: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49265 is a vulnerability in the Linux kernel's power management domain (PM domains) subsystem. The issue was discovered when a genpd (Generic Power Domain) with GENPDFLAGIRQSAFE gets removed, causing a sleep-in-atomic bug due to genpddebug_remove() being called with a spinlock being held (NVD, RedHat).

The vulnerability manifests as a sleep-in-atomic bug in the kernel's power management domain subsystem. The issue occurs specifically when genpddebugremove() is called while holding a spinlock, which is not allowed in atomic context. The bug is triggered during the removal of a genpd with GENPDFLAGIRQ_SAFE flag set. According to the kernel logs, this results in a 'sleeping function called from invalid context' error at kernel/locking/rwsem.c:1460 (Kernel Commit).

The vulnerability can lead to system instability when removing power domains with specific flags set. This primarily affects system initialization and power management operations, potentially causing kernel panics or system crashes (RedHat).

The issue has been fixed by moving the genpddebugremove() call outside of the locked section in the kernel code. The fix was implemented by modifying the code sequence in genpd_remove() function to ensure the debug removal happens after releasing the lock (Kernel Commit).