CVE-2022-49055

drm/amdkfd: Check for potential null return of kmalloc_array()

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check for potential null return of kmalloc_array()

As the kmalloc_array() may return null, the 'event_waiters[i].wait' would lead to null-pointer dereference. Therefore, it is better to check the return value of kmalloc_array() to avoid this confusion.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 32cf90a521dcc0f136db7ee5ba32bfe5f79e460eAffected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 40bf32dbfef866c83a3e74800b81d79e52b6d20bAffected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 94869bb0de69a812f70231b0eb480bb2f7ae73a6Affected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before c7a268b33882d5feaafd29c1734456f41ba41396Affected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 1d7a5aae884ca727d41c7ed15d4c82fdb67c040cAffected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before f2658d5966bcee8c3eb487875f459756d4f7cdfcAffected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 0a692c625e373fef692ffbc7fc41f8a025f01cb7Affected f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before ebbb7bb9e80305820dc2328a371c1b35679f2667Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.9.311 through 4.9.Not affected 4.14.276 through 4.14.Not affected 4.19.239 through 4.19.Not affected 5.4.190 through 5.4.Not affected 5.10.112 through 5.10.Not affected 5.15.35 through 5.15.Not affected 5.17.4 through 5.17.*Not affected 5.18 and laterNot affected

Product

Versions

LinuxLinux

f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 32cf90a521dcc0f136db7ee5ba32bfe5f79e460eAffected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 40bf32dbfef866c83a3e74800b81d79e52b6d20bAffected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 94869bb0de69a812f70231b0eb480bb2f7ae73a6Affected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before c7a268b33882d5feaafd29c1734456f41ba41396Affected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 1d7a5aae884ca727d41c7ed15d4c82fdb67c040cAffected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before f2658d5966bcee8c3eb487875f459756d4f7cdfcAffected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before 0a692c625e373fef692ffbc7fc41f8a025f01cb7Affected
f3a398183f7b9ef78f6b71ee9f7641e046403bcb to before ebbb7bb9e80305820dc2328a371c1b35679f2667Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.9.311 through 4.9.*Not affected
4.14.276 through 4.14.*Not affected
4.19.239 through 4.19.*Not affected
5.4.190 through 5.4.*Not affected
5.10.112 through 5.10.*Not affected
5.15.35 through 5.15.*Not affected
5.17.4 through 5.17.*Not affected
5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.