Memory Leak Vulnerability in Linux Kernel's AMD GPU Metrics Table
Summary
CVE-2022-49971: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in smu_v13_0_4_init_smc_tables(), but not freed in s... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It is widely used in various distributions, including Debian. The kernel provides essential functionalities such as process management, memory management, and device control. This vulnerability specifically affects the AMD GPU metrics table, which is responsible for monitoring GPU performance metrics. The issue arises from improper memory management, leading to potential memory leaks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AMD GPU metrics table management. Memory is allocated for the gpu_metrics_table in the function smu_v13_0_4_init_smc_tables() but is not properly freed in smu_v13_0_4_fini_smc_tables(). This oversight can result in memory leaks, which may degrade system performance over time and lead to resource exhaustion. The vulnerability affects various Debian versions of the Linux package, making it critical for users to address it promptly.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch by updating the package as described above.
Conclusion
The CVE-2022-49971 vulnerability in the Linux kernel poses a significant risk due to improper memory management in the AMD GPU metrics table. Users are advised to update their Linux packages to the patched versions to prevent potential memory leaks and ensure system stability.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49971 is a vulnerability in the Linux kernel related to memory management in the AMD GPU metrics table, which can lead to memory leaks.
This vulnerability can cause memory leaks, potentially degrading system performance and leading to resource exhaustion over time.
The vulnerability affects the Linux package in Debian 11, 12, and 13.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is recommended to prioritize updating your package to mitigate the risk associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
