CVE-2022-49458 is a vulnerability identified in the Linux kernel specifically within the Direct Rendering Manager (DRM) subsystem for Qualcomm's MSM (Mobile Station Modem) platform. The flaw arises from improper handling of interrupt requests (IRQs) during error paths in the msm_drm driver. When the msm_drm_init() function encounters an error before successfully requesting an IRQ via request_irq(), the subsequent call to msm_drm_uninit() erroneously attempts to free an IRQ that was never allocated. This results in a double-free or freeing of an already freed IRQ, which triggers kernel warnings and can lead to instability or kernel crashes. The backtrace provided in the description shows the kernel attempting to free IRQ 187 multiple times, causing a warning in the kernel's IRQ management code. The issue is rooted in the error handling logic where free_irq() is called without verifying if the IRQ was successfully requested. This vulnerability affects Linux kernel versions containing the msm_drm driver for Qualcomm hardware, particularly the SM8350 platform, which is used in certain Qualcomm Snapdragon chipsets. Although no known exploits are currently reported in the wild, the flaw can cause denial of service (DoS) conditions by crashing or destabilizing the kernel, potentially impacting system availability. The patch involves adding checks to ensure free_irq() is only called if the IRQ was successfully requested, preventing the double-free scenario. This vulnerability is technical and specific to the DRM driver on Qualcomm MSM platforms within Linux kernels, and it requires kernel-level access to trigger.

For European organizations, the primary impact of CVE-2022-49458 lies in potential system instability or denial of service on devices running affected Linux kernels with Qualcomm MSM DRM drivers. This is particularly relevant for organizations deploying embedded systems, mobile devices, or specialized hardware using Qualcomm Snapdragon chipsets with Linux-based operating systems. The vulnerability could cause unexpected kernel crashes, leading to downtime or service interruptions. While it does not directly lead to privilege escalation or data breaches, the resulting DoS could disrupt critical services, especially in telecommunications, industrial control systems, or IoT deployments that rely on Qualcomm hardware. Given the widespread use of Linux in servers, desktops, and embedded devices, any affected systems in European enterprises or service providers could experience reliability issues until patched. However, the impact is limited to systems using the specific MSM DRM driver and Qualcomm hardware, so general Linux server infrastructure without this hardware is unaffected. No known active exploitation reduces immediate risk, but unpatched systems remain vulnerable to accidental crashes or targeted DoS attempts.

European organizations should prioritize updating Linux kernels to versions that include the fix for CVE-2022-49458. Specifically, they should apply patches that add proper checks before calling free_irq() in the msm_drm driver error paths. For embedded and mobile devices using Qualcomm MSM platforms, firmware and kernel updates from device vendors or Qualcomm should be deployed promptly. System administrators should audit their device inventory to identify hardware using affected Qualcomm chipsets and verify kernel versions. In environments where immediate patching is not feasible, monitoring kernel logs for IRQ free warnings can help detect attempts to trigger this issue. Additionally, implementing kernel crash dump and recovery mechanisms can reduce downtime caused by potential crashes. For critical infrastructure, consider isolating affected devices or limiting exposure to untrusted inputs that might trigger the error path. Collaboration with hardware vendors to ensure timely firmware and driver updates is also recommended. Finally, maintain robust backup and recovery procedures to mitigate service disruption risks.