CVE-2022-49055
drm/amdkfd: Check for potential null return of kmalloc_array()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.2
References 8
git.kernel.org
- stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e
- stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b
- stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6
- stable/c/c7a268b33882d5feaafd29c1734456f41ba41396
- stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c
- stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc
- stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7
- stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667