Critical FPU Protection Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2022-49069: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw [Why] Below general protection fault observed when WebGL Aquarium is run fo... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, managing hardware and system resources. It provides essential services for all other parts of the operating system, including process management, memory management, and device control. This vulnerability specifically impacts the AMD display driver within the kernel, which is responsible for rendering graphics and managing display outputs. The issue arises from a lack of floating-point unit (FPU) protection during certain operations, leading to potential system instability and crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2022-49069, originates from the AMD display driver in the Linux kernel. It can cause a general protection fault when running applications like WebGL Aquarium for extended periods. This fault is triggered by non-canonical addresses, which can lead to system crashes and instability. The issue is exacerbated when DRM debug logs are enabled, as it increases the likelihood of context switching and potential loss of the virtual block address (vba) context. The vulnerability poses a significant risk to systems relying on the AMD display driver, particularly in environments where graphical applications are frequently used.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable DRM debug logs to reduce the likelihood of encountering the general protection fault. This can be done by modifying the kernel boot parameters or adjusting the settings in the graphics driver configuration.
Conclusion
CVE-2022-49069 is a critical vulnerability affecting the Linux kernel's AMD display driver, leading to potential system crashes and instability. Users are strongly advised to update their kernel to the patched version to mitigate risks. Temporary workarounds are available, but applying the patch is the most effective solution.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49069 is a vulnerability in the Linux kernel's AMD display driver that can cause system crashes due to a lack of FPU protection.
This vulnerability can lead to general protection faults, causing instability and crashes, especially when running graphical applications for extended periods.
Yes, a patch is available in the form of updated kernel versions. Users should update to at least version 5.17.3-1 for Debian 12 and 13.
As a temporary measure, you can disable DRM debug logs to minimize the risk of encountering the issue until you can apply the patch.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
