CVE-2022-49055

drm/amdkfd: Check for potential null return of kmalloc_array()

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

MITRE

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference.
Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2025-02-26 CVE Reserved
2025-02-26 CVE Published
2025-02-26 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e	2022-04-20
https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b	2022-04-20
https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6	2022-04-20
https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396	2022-04-20
https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c	2022-04-20
https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc	2022-04-20
https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7	2022-04-20
https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667	2022-03-25

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.9.311 Search vendor "Linux" for product "Linux Kernel" and version " < 4.9.311"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.14.276 Search vendor "Linux" for product "Linux Kernel" and version " < 4.14.276"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.19.239 Search vendor "Linux" for product "Linux Kernel" and version " < 4.19.239"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.4.190 Search vendor "Linux" for product "Linux Kernel" and version " < 5.4.190"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.112 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.112"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15.35 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15.35"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.17.4 Search vendor "Linux" for product "Linux Kernel" and version " < 5.17.4"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.18 Search vendor "Linux" for product "Linux Kernel" and version " < 5.18"		en		Affected