Linux Kernel Vulnerability CVE-2022-49773: Warning in AMD Display Driver Configuration
Summary
CVE-2022-49773: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix optc2_configure warning on dcn314 [Why] dcn314 uses optc2_configure_crc() that wraps optc1_configure_crc() + set additional registe... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the operating system, including device drivers, system calls, and process management. The kernel is crucial for the stability and performance of the system. The vulnerability CVE-2022-49773 affects the AMD display driver, specifically in the configuration of the display controller, which can lead to warnings during operation.
Vulnerability Detail
CVE-2022-49773 is a vulnerability in the Linux kernel's AMD display driver that arises from the improper use of the optc2_configure_crc() function. This function is intended to configure the display controller but incorrectly wraps another function, optc1_configure_crc(), which is not suitable for the dcn314 display controller. While this issue is not critical, it can lead to warnings in the system logs, indicating potential misconfigurations that could affect the display output.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, you can directly use the optc1_configure_crc() function instead of the optc2_configure_crc() function in your code to avoid triggering the warning. This adjustment should be made in the display driver code where applicable.
Conclusion
CVE-2022-49773 is a notable vulnerability in the Linux kernel's AMD display driver that can lead to warnings during operation. While it is not critical, addressing it through updates or workarounds is advisable to maintain system stability and performance. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49773 is a vulnerability in the Linux kernel's AMD display driver that causes warnings due to improper function usage.
While not critical, this vulnerability can lead to warnings in system logs, indicating potential misconfigurations in the display output.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing the workaround by using the optc1_configure_crc() function directly in your code.
More information can be found in the official CVE database or by visiting the Linux kernel mailing lists and documentation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
