Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49976: Linux kernel touchscreen stops working on Chuwi Hi8 Windows BIOS
CVE-2022-49976 · published 1 year ago
Summary
The Linux kernel code that supports Android tablets mistakenly runs on the Chuwi Hi8 when it is using a Windows BIOS, causing the tablet’s touchscreen to stop responding and generating error messages. The problem has been corrected so the code now detects a Windows BIOS and does not interfere with the touchscreen. Apply the latest kernel update for your Linux distribution to resolve the issue.
What to do
- Update debian linux to version 6.0.2-1.
- Update linux kernel to version 5.19.8.
- Update linux linux_kernel to version 5.19.8 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.17.1, < 5.19.8 5.17 6.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 6.0.2-1 Fix: upgrade to 6.0.2-1
|
| Debian:13 | debian | linux |
< 6.0.2-1 Fix: upgrade to 6.0.2-1
|
| Debian:14 | debian | linux |
< 6.0.2-1 Fix: upgrade to 6.0.2-1
|
| Linux | linux | kernel |
>= 5.17.0, < 5.19.8 Fix: upgrade to 5.19.8
|
Original advisory text
platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS The x86-android-tablets handling for the Chuwi Hi8 is only necessary with the Android BIOS and it is causing problems with the Windows BIOS version. Specifically when trying to register the already present touchscreen x86_acpi_irq_helper_get() calls acpi_unregister_gsi(), this breaks the working of the touchscreen and also leads to an oops: [ 14.248946] ------------[ cut here ]------------ [ 14.248954] remove_proc_entry: removing non-empty directory 'irq/75', leaking at least 'MSSL0001:00' [ 14.248983] WARNING: CPU: 3 PID: 440 at fs/proc/generic.c:718 remove_proc_entry ... [ 14.249293] unregister_irq_proc+0xe0/0x100 [ 14.249305] free_desc+0x29/0x70 [ 14.249312] irq_free_descs+0x4b/0x80 [ 14.249320] mp_unmap_irq+0x5c/0x60 [ 14.249329] acpi_unregister_gsi_ioapic+0x2a/0x40 [ 14.249338] x86_acpi_irq_helper_get+0x4b/0x190 [x86_android_tablets] [ 14.249355] x86_android_tablet_init+0x178/0xe34 [x86_android_tablets] Add an init callback for the Chuwi Hi8, which detects when the Windows BIOS is in use and exits with -ENODEV in that case, fixing this.
References
- https://git.kernel.org/stable/c/2986c51540ed50ac654ffb5a772e546c02628c91 URL
- https://security-tracker.debian.org/tracker/CVE-2022-49976 Vendor Advisory
- https://git.kernel.org/stable/c/c77b724cddfb8ac1291a60e3e68937e62cbfc5e0 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49976... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49976 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published18 Jun 2025
Updated29 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta