---
id: CVE-2022-50510
title: 'perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()

  arm_smmu_pmu_init() won't remove the callback added by
  cpuhp_setup_state_multi() when platform_driver_reg…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    d69bdb61d577297d3851fc9f6403574bf73ef41f
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    359286f886feef38536eaa7e673dc3440f03b0a1
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    b131304fe722853cf26e55c4fa21fc58a36e7f21
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    f245ca9a0fe7f794a8187ad803d5e2ced5a11cb2
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    582babe17ea878ec1d76f30e03f3a6ce6e30eb91
  - >-
    Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 <
    6f2d566b46436a50a80d6445e82879686b89588c
  - Linux 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:12:41.737044Z'
published: '2025-10-07'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:20:50.054Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50510'
references:
  - url: 'https://git.kernel.org/stable/c/d69bdb61d577297d3851fc9f6403574bf73ef41f'
  - url: 'https://git.kernel.org/stable/c/359286f886feef38536eaa7e673dc3440f03b0a1'
  - url: 'https://git.kernel.org/stable/c/b131304fe722853cf26e55c4fa21fc58a36e7f21'
  - url: 'https://git.kernel.org/stable/c/f245ca9a0fe7f794a8187ad803d5e2ced5a11cb2'
  - url: 'https://git.kernel.org/stable/c/582babe17ea878ec1d76f30e03f3a6ce6e30eb91'
  - url: 'https://git.kernel.org/stable/c/6f2d566b46436a50a80d6445e82879686b89588c'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05148
ingestedAt: '2026-11-05T22:38:31.744Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()

arm_smmu_pmu_init() won't remove the callback added by
cpuhp_setup_state_multi() when platform_driver_register() failed. Remove
the callback by cpuhp_remove_multi_state() in fail path.

Similar to the handling of arm_ccn_init() in commit 26242b330093 ("bus:
arm-ccn: Prevent hotplug callback leak")

## Affected

- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < d69bdb61d577297d3851fc9f6403574bf73ef41f`
- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < 359286f886feef38536eaa7e673dc3440f03b0a1`
- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < b131304fe722853cf26e55c4fa21fc58a36e7f21`
- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < f245ca9a0fe7f794a8187ad803d5e2ced5a11cb2`
- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < 582babe17ea878ec1d76f30e03f3a6ce6e30eb91`
- `Linux >= 7d839b4b9e00645e49345d6ce5dfa8edf53c1a21 < 6f2d566b46436a50a80d6445e82879686b89588c`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.