What’s Vulnerable › Vulnerabilities

CVE-2022-49233: drm/amd/display: Call dc_stream_release for remove link enc assignment

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dc_stream_release for remove link enc assignment [Why] A porting error resulted in the stream assignment for the link being retained without being released - a memory leak. [How] Fix the porting error by adding back the dc_stream_release() intended as part of the original patch.

Affected products

• Linux kernel: from 5.17 before 5.17.2 — fixed in 5.17.2

How to fix

Upgrade to a fixed version: Linux kernel 5.17.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/a28b7b6a0c827ce672edcdb5b2b5916b0beebe03
• https://git.kernel.org/stable/c/f2bde8349c35d01d7c50456ea06a5c7d5e0e5ed0

Get alerted when CVE-2022-49233 or the next vulnerability affects your stack