What’s Vulnerable › Vulnerabilities

CVE-2022-50515: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() If construction of the array of work queues to handle hpd_rx_irq offload work fails, we need to unwind. Destroy all the created workqueues and the allocated memory for the hpd_rx_irq_offload_work_queue struct array.

Affected products

• Linux kernel: from 5.15.58 before 5.15.75; from 5.16 before 5.19.17; from 6.0 before 6.0.3 — fixed in 5.15.75, 5.19.17, 6.0.3

How to fix

Upgrade to a fixed version: Linux kernel 5.15.75, 5.19.17, 6.0.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3ba3814c00a4817eb1cd31eff08d921c40e5f3a4
• https://git.kernel.org/stable/c/600de40ed50c8b5ecb9c7a4f41eb882066c15a00
• https://git.kernel.org/stable/c/7136f956c73c4ba50bfeb61653dfd6a9669ea915
• https://git.kernel.org/stable/c/8b8da09da2701330e7f2c371655887e3d7defe90

Get alerted when CVE-2022-50515 or the next vulnerability affects your stack