CVE-2022-49137: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/amdgpu/amdgpucs: fix refcount leak of a dmafence obj
This issue takes place in an error path in amdgpucsfencetohandleioctl(). When info->in.what falls into default case, the function simply returns -EINVAL, forgetting to decrement the reference count of a dmafence obj, which is bumped earlier by amdgpucsgetfence(). This may result in reference count leaks.
Fix it by decreasing the refcount of specific object before returning the error code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49137?
CVE-2022-49137 has a moderate severity level due to a reference count leak in the Linux kernel.
How do I fix CVE-2022-49137?
To fix CVE-2022-49137, you should update to a patched version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-49137?
CVE-2022-49137 affects various versions of the Linux kernel prior to the patched releases, specifically those below 4.19.238 and between certain 5.x versions.
What are the consequences of CVE-2022-49137 if exploited?
If exploited, CVE-2022-49137 could potentially lead to resource leaks within the kernel, impacting system stability and security.
Is there a workaround for CVE-2022-49137 until I can update?
There are no specific workarounds for CVE-2022-49137; updating to the latest kernel version is the recommended solution.