CVE-2022-49055

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49055
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7 Patch
https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c Patch
https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e Patch
https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b Patch
https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6 Patch
https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396 Patch
https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667 Patch
https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

18 Mar 2025, 19:02

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: comprobar si kmalloc_array() puede devolver un valor nulo. Como kmalloc_array() puede devolver un valor nulo, 'event_waiters[i].wait' provocaría una desreferencia de puntero nulo. Por lo tanto, es mejor comprobar el valor de retorno de kmalloc_array() para evitar esta confusión.
CPE cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7 - () https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7 - Patch
References () https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c - () https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c - Patch
References () https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e - () https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e - Patch
References () https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b - () https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b - Patch
References () https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6 - () https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6 - Patch
References () https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396 - () https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396 - Patch
References () https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667 - () https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667 - Patch
References () https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc - () https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc - Patch

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-03-18 19:02

NVD link : CVE-2022-49055

Mitre link : CVE-2022-49055

CVE.ORG link : CVE-2022-49055

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference