CVE-2022-50354

drm/amdkfd: Fix kfd_process_device_init_vm error handling

State: Published
Severity: 7.8 High
Published: Sep 17, 2025
Updated: Aug 5, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix kfd_process_device_init_vm error handling

Should only destroy the ib_mem and let process cleanup worker to free the outstanding BOs. Reset the pointer in pdd->qpd structure, to avoid NULL pointer access in process destroy worker.

BUG: kernel NULL pointer dereference, address: 0000000000000010 Call Trace: amdgpu_amdkfd_gpuvm_unmap_gtt_bo_from_kernel+0x46/0xb0 [amdgpu] kfd_process_device_destroy_cwsr_dgpu+0x40/0x70 [amdgpu] kfd_process_destroy_pdds+0x71/0x190 [amdgpu] kfd_process_wq_release+0x2a2/0x3b0 [amdgpu] process_one_work+0x2a1/0x600 worker_thread+0x39/0x3d0

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	68df0f195a689bbb0f92bfeadee6edd90c79c31f to before b6e78bd3bf2eb964c95eb2596d3cd367307a20b5Affected 68df0f195a689bbb0f92bfeadee6edd90c79c31f to before 9d74d1f52e16d8e07f7fbe52e96d6391418a2fe9Affected 68df0f195a689bbb0f92bfeadee6edd90c79c31f to before 29d48b87db64b6697ddad007548e51d032081c59Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.0.19 through 6.0.Not affected 6.1.5 through 6.1.Not affected 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.