CVE-2022-49650: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49650 affects the Linux kernel's DMA engine subsystem, specifically the Qualcomm BAM DMA driver. The vulnerability was discovered when a previous commit (dbad41e7bb5f) introduced unbalanced pmruntimeget/put() calls when the BAM is controlled remotely (Kernel Git).

The vulnerability stems from incorrect runtime power management handling in the qcom/bamdma.c driver. The issue occurs due to a check for runtime PM being enabled that caused unbalanced power management calls, specifically in the pmruntimeget/put() functions. The fix involves reverting the problematic check and enabling pmruntime in all cases, as the clk_* functions already handle null clock cases appropriately (Kernel Git).

The vulnerability results in a runtime PM underflow condition in the DMA engine subsystem. This could potentially affect system stability and power management functionality on affected systems using the Qualcomm BAM DMA driver (Kernel Git).

The issue has been fixed by reverting the problematic runtime PM check and enabling pm_runtime in all cases. The fix also includes cleanup of unnecessary bamclk null checks. The patch has been merged into the Linux kernel (Kernel Git).