LiveActive security incident?Get immediate response
CVE Record

CVE-2022-49841: serial: imx: Add missing .thaw_noirq hook

In the Linux kernel, the following vulnerability has been resolved: serial: imx: Add missing .thaw_noirq hook The following warning is seen with non-console UART instance when system hibernates. [ 37.371969] ------------[ cut here ]------------ [ 37.376599] uart3_root_clk already disabled [ 37.380810] WARNING: CPU: 0 PID: 296 at drivers/clk/clk.c:952 clk_core_disable+0xa4/0xb0 ... [ 37.506986] Call trace: [ 37.509432] clk_core_disable+0xa4/0xb0 [ 37.513270] clk_disable+0x34/0x50 [ 37.516672] imx_uart_thaw+0x38/0x5c [ 37.520250] platform_pm_thaw+0x30/0x6c [ 37.524089] dpm_run_callback.constprop.0+0x3c/0xd4 [ 37.528972] device_resume+0x7c/0x160 [ 37.532633] dpm_resume+0xe8/0x230 [ 37.536036] hibernation_snapshot+0x288/0x430 [ 37.540397] hibernate+0x10c/0x2e0 [ 37.543798] state_store+0xc4/0xd0 [ 37.547203] kobj_attr_store+0x1c/0x30 [ 37.550953] sysfs_kf_write+0x48/0x60 [ 37.554619] kernfs_fop_write_iter+0x118/0x1ac [ 37.559063] new_sync_write+0xe8/0x184 [ 37.562812] vfs_write+0x230/0x290 [ 37.566214] ksys_write+0x68/0xf4 [ 37.569529] __arm64_sys_write+0x20/0x2c [ 37.573452] invoke_syscall.constprop.0+0x50/0xf0 [ 37.578156] do_el0_svc+0x11c/0x150 [ 37.581648] el0_svc+0x30/0x140 [ 37.584792] el0t_64_sync_handler+0xe8/0xf0 [ 37.588976] el0t_64_sync+0x1a0/0x1a4 [ 37.592639] ---[ end trace 56e22eec54676d75 ]--- On hibernating, pm core calls into related hooks in sequence like: .freeze .freeze_noirq .thaw_noirq .thaw With .thaw_noirq hook being absent, the clock will be disabled in a unbalanced call which results the warning above. imx_uart_freeze() clk_prepare_enable() imx_uart_suspend_noirq() clk_disable() imx_uart_thaw clk_disable_unprepare() Adding the missing .thaw_noirq hook as imx_uart_resume_noirq() will have the call sequence corrected as below and thus fix the warning. imx_uart_freeze() clk_prepare_enable() imx_uart_suspend_noirq() clk_disable() imx_uart_resume_noirq() clk_enable() imx_uart_thaw clk_disable_unprepare()

UnknownCVSS not scoredNot KEV-listedUpdated
Glexia's TakeAutomated analysislow

Security readout for executives and security teams

Plain-English summary

CVE-2022-49841 is a Linux kernel power-management defect in the i.MX serial driver. During hibernation thaw, a missing no-interrupt resume hook can leave UART clock handling unbalanced and trigger kernel warnings. The sources do not show remote exploitability, data theft, or active exploitation.

Executive priority

Treat this as a low-priority operational kernel maintenance item unless your fleet includes i.MX-based devices using hibernation. It is not supported as an emergency internet-exposed vulnerability by the provided sources.

Technical view

The affected Linux i.MX UART path lacks a .thaw_noirq callback. During hibernation, freeze enables the clock, suspend_noirq disables it, then thaw disables/unprepares it again without the matching noirq re-enable. Stable fixes add .thaw_noirq as imx_uart_resume_noirq, restoring balanced clock enable/disable sequencing.

Likely exposure

Exposure appears limited to Linux systems using the i.MX serial driver, especially non-console UART instances that enter hibernation. General Linux servers without this hardware path or hibernation workflow are unlikely to be exposed based on the provided evidence.

Exploitation context

KEV is false, and the source bundle provides no evidence of public exploitation. The described trigger is a local hibernation power-management path, not a network-facing condition. Security impact is not clearly established in the available sources.

Researcher notes

The record lacks CVSS, CWE, and a clearly stated security consequence. The strongest evidence is the kernel fix rationale and warning trace. Validate affectedness through hardware, driver use, hibernation behavior, and stable kernel lineage rather than assuming broad Linux exposure.

Mitigation direction

  • Identify Linux systems using the i.MX UART driver and hibernation.
  • Apply the relevant stable kernel update containing the missing .thaw_noirq hook.
  • If patch status is unclear, follow distribution or kernel vendor guidance.
  • Prioritize embedded devices that rely on hibernate/resume workflows.

Validation and detection

  • Check kernel version against affected and fixed stable releases in the CVE record.
  • Review boot logs for uart*_root_clk already disabled warnings during hibernation.
  • Confirm i.MX UART callbacks include .thaw_noirq mapped to resume_noirq.
  • Retest hibernate and thaw on non-console UART configurations.
Prepared
Confidence
medium
Sources
8

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2022-49841 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
0ADP providers
7Source links

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775, 09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775, 09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775, 09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775, 09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775, 09df0b3464e528c6a4ca2c48d9ff6d2fd7cbd775unaffected
LinuxLinux4.16, 0, 4.19.267, 5.4.225, 5.10.156, 5.15.80, 6.0.10, 6.1affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.