What’s Vulnerable › Vulnerabilities

CVE-2022-49055: drm/amdkfd: Check for potential null return of kmalloc_array()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.

Affected products

• Linux kernel: before 4.9.311; from 4.10 before 4.14.276; from 4.15 before 4.19.239; from 4.20 before 5.4.190; from 5.5 before 5.10.112; from 5.11 before 5.15.35 — fixed in 4.14.276, 4.19.239, 4.9.311, 5.10.112, 5.15.35, 5.17.4

How to fix

Upgrade to a fixed version: Linux kernel 4.14.276, 4.19.239, 4.9.311, 5.10.112. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a692c625e373fef692ffbc7fc41f8a025f01cb7
• https://git.kernel.org/stable/c/1d7a5aae884ca727d41c7ed15d4c82fdb67c040c
• https://git.kernel.org/stable/c/32cf90a521dcc0f136db7ee5ba32bfe5f79e460e
• https://git.kernel.org/stable/c/40bf32dbfef866c83a3e74800b81d79e52b6d20b
• https://git.kernel.org/stable/c/94869bb0de69a812f70231b0eb480bb2f7ae73a6
• https://git.kernel.org/stable/c/c7a268b33882d5feaafd29c1734456f41ba41396
• https://git.kernel.org/stable/c/ebbb7bb9e80305820dc2328a371c1b35679f2667
• https://git.kernel.org/stable/c/f2658d5966bcee8c3eb487875f459756d4f7cdfc

Get alerted when CVE-2022-49055 or the next vulnerability affects your stack