Critical NULL Pointer Dereference in Linux Kernel's AMD GPU Driver
Summary
CVE-2022-49864: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() ./drivers/gpu/drm/amd/amdkfd/kfd_migrate.c:985:58-62: ERROR: p is NULL but dereferenced... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. The AMD GPU driver, specifically the amdkfd component, facilitates communication between the operating system and AMD graphics hardware. This driver is crucial for performance and stability in systems utilizing AMD GPUs. However, it has been found to contain a vulnerability that can lead to system instability and crashes.
Vulnerability Detail
In the Linux kernel's AMD GPU driver (amdkfd), a NULL pointer dereference occurs in the svm_migrate_to_ram() function. This vulnerability arises when the code attempts to dereference a pointer that has not been properly initialized, leading to potential crashes or undefined behavior. The specific line of code causing the issue is located in kfd_migrate.c at line 985. If exploited, this vulnerability can compromise system stability and may lead to denial of service.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate this vulnerability without applying the patch. Users are advised to monitor their systems and apply the necessary updates as soon as they are available.
Conclusion
The CVE-2022-49864 vulnerability in the Linux kernel's AMD GPU driver poses a significant risk to system stability. Users are strongly encouraged to update their systems to the latest patched version to mitigate this risk. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49864 is a vulnerability in the Linux kernel's AMD GPU driver that can lead to a NULL pointer dereference, potentially causing system crashes.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to system instability, crashes, and denial of service, affecting the overall performance of systems using AMD GPUs.
Yes, a patch is available. Users should update to version 6.0.10-1 or later of the Linux package to fix the vulnerability.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and apply the update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
