Deadlock Vulnerability in Linux Kernel's AMD GPU Driver: CVE-2022-49133
Summary
CVE-2022-49133: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: svm range restore work deadlock when process exit kfd_process_notifier_release flush svm_range_restore_work which calls svm_range_list_lock_... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core of many operating systems, providing essential services for all other parts of the system. It supports various hardware and software configurations, making it a critical component for system stability and performance. The vulnerability CVE-2022-49133 specifically affects the AMD GPU driver (amdkfd), which is responsible for managing GPU resources and ensuring efficient processing of graphics tasks. This vulnerability can lead to deadlock situations during process exits, potentially causing system instability.
Vulnerability Detail
CVE-2022-49133 is a deadlock vulnerability in the Linux kernel's AMD GPU driver. It arises when the kfd_process_notifier_release function attempts to flush deferred work while simultaneously handling process exit notifications. This can lead to a situation where the system waits indefinitely for a resource that is no longer available, resulting in a deadlock. The vulnerability is particularly concerning as it can affect system performance and reliability, especially in environments where multiple processes interact with the GPU.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
CVE-2022-49133 is a significant vulnerability affecting the Linux kernel's AMD GPU driver, leading to potential deadlocks during process exits. Users are encouraged to update their systems to the patched version to mitigate risks associated with this vulnerability. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49133 is a vulnerability in the Linux kernel's AMD GPU driver that can lead to deadlock situations during process exits.
This vulnerability can cause system instability and performance issues, especially in environments with multiple GPU processes.
Yes, a patch is available for Debian 12 and 13 in version 5.17.3-1. Users should update their systems to this version.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the patch as soon as possible.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software using a manifest file like package-lock.json. You can check your application at Vulert Scanner without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
