What’s Vulnerable › Vulnerabilities

CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4)

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-08-15
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix size validation for non-exclusive domains (v4) Fix amdgpu_bo_validate_size() to check whether the TTM domain manager for the requested memory exists, else we get a kernel oops when dereferencing "man". v2: Make the patch standalone, i.e. not dependent on local patches. v3: Preserve old behaviour and just check that the manager pointer is not NULL. v4: Complain if GTT domain requested and it is uninitialized--most likely a bug.

Affected products

• Linux kernel: from 4.2 before 6.0.19; from 6.1 before 6.1.5 — fixed in 6.0.19, 6.1.5

How to fix

Upgrade to a fixed version: Linux kernel 6.0.19, 6.1.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/7554886daa31eacc8e7fac9e15bbce67d10b8f1f
• https://git.kernel.org/stable/c/80546eef216854a7bd47e39e828f04b406c00599
• https://git.kernel.org/stable/c/8ba7c55e112f4ffd2a95b99be1cb1c891ef08ba1

Get alerted when CVE-2022-50527 or the next vulnerability affects your stack