Double Free Vulnerability in Linux Kernel's AMD Display Driver
Summary
CVE-2022-49203: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix double free during GPU reset on DC streams [Why] The issue only occurs during the GPU reset code path. Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. The AMD display driver is responsible for managing graphics output on systems using AMD GPUs. This vulnerability specifically affects the display driver during GPU reset operations, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a double free vulnerability has been identified in the AMD display driver during GPU reset operations. This issue arises when the driver attempts to clear link encoder assignments after a GPU reset, leading to a situation where the same memory is freed twice. This can result in a NULL pointer dereference, causing system crashes or unpredictable behavior. The vulnerability is particularly critical as it can be exploited during GPU reset, a common operation in graphics-intensive applications.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
The CVE-2022-49203 vulnerability in the Linux kernel's AMD display driver poses significant risks during GPU reset operations. Users are strongly advised to update to the patched version to ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity of your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49203 is a vulnerability in the Linux kernel's AMD display driver that can lead to a double free error during GPU reset operations.
Exploitation of this vulnerability can result in system crashes or undefined behavior, particularly during graphics-intensive tasks.
If you are using a version of the Linux kernel prior to 5.17.3-1, your system may be vulnerable. You can check your kernel version using the command 'uname -r'.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
