Memory leak in Linux kernel - CVE-2022-49135
Published: February 26, 2025 / Updated: May 11, 2025
Vulnerability identifier: #VU104379
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-49135
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the dp_link_settings_read(), dp_phy_settings_read(), dp_dsc_clock_en_read(), dp_dsc_slice_width_read(), dp_dsc_slice_height_read(), dp_dsc_bits_per_pixel_read(), dp_dsc_pic_width_read(), dp_dsc_pic_height_read(), dp_dsc_chunk_size_read(), dp_dsc_slice_bpg_offset_read() and dcc_en_bits_read() functions in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c. A local user can perform a denial of service (DoS) attack.
How to mitigate CVE-2022-49135
Install update from vendor's website.
Sources
- https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994
- https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52
- https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a
- https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3