Null Pointer Dereference Vulnerability in Linux Kernel (CVE-2022-49529)
Summary
CVE-2022-49529: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix the null pointer while the smu is disabled It needs to check if the pp_funcs is initialized while release the context, otherwise it w... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including process management, memory management, and device drivers. The vulnerability CVE-2022-49529 specifically affects the amdgpu driver, which is responsible for managing AMD graphics cards. This vulnerability arises when the software SMU (System Management Unit) is disabled, leading to potential system instability.
Vulnerability Detail
CVE-2022-49529 is a null pointer dereference vulnerability found in the amdgpu driver of the Linux kernel. This issue occurs when the driver attempts to release a context without checking if the pp_funcs (powerplay functions) are initialized. If the software SMU is not enabled, this can lead to a null pointer panic, causing the kernel to crash. The vulnerability can be exploited by triggering specific operations that rely on the amdgpu driver, potentially leading to system crashes and data loss.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. It is advisable to keep the system updated to avoid potential exploitation.
Conclusion
CVE-2022-49529 is a significant vulnerability in the Linux kernel's amdgpu driver that can lead to system crashes due to null pointer dereference. Users are encouraged to update their systems to the latest kernel version to mitigate this risk. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49529 is a vulnerability in the Linux kernel's amdgpu driver that can cause a null pointer dereference, leading to system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to system instability, crashes, and potential data loss.
Yes, a patch is available in the form of updated Linux kernel versions 5.18.5-1 and later.
While there are no specific workarounds, it is crucial to monitor your system for unusual behavior and plan to update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
