CVE-2022-49529

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49529
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49529.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49529
Downstream
Related
Published
2025-02-26T02:13:50Z
Modified
2025-10-15T21:47:07.706110Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
drm/amdgpu/pm: fix the null pointer while the smu is disabled
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm: fix the null pointer while the smu is disabled

It needs to check if the pp_funcs is initialized while release the context, otherwise it will trigger null pointer panic while the software smu is not enabled.

[ 1109.404555] BUG: kernel NULL pointer dereference, address: 0000000000000078 [ 1109.404609] #PF: supervisor read access in kernel mode [ 1109.404638] #PF: errorcode(0x0000) - not-present page [ 1109.404657] PGD 0 P4D 0 [ 1109.404672] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 1109.404701] CPU: 7 PID: 9150 Comm: amdgputest Tainted: G OEL 5.16.0-custom #1 [ 1109.404732] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006 [ 1109.404765] RIP: 0010:amdgpudpmforceperformancelevel+0x1d/0x170 [amdgpu] [ 1109.405109] Code: 5d c3 44 8b a3 f0 80 00 00 eb e5 66 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 08 4c 8b b7 f0 7d 00 00 <49> 83 7e 78 00 0f 84 f2 00 00 00 80 bf 87 80 00 00 00 48 89 fb 0f [ 1109.405176] RSP: 0018:ffffaf3083ad7c20 EFLAGS: 00010282 [ 1109.405203] RAX: 0000000000000000 RBX: ffff9796b1c14600 RCX: 0000000002862007 [ 1109.405229] RDX: ffff97968591c8c0 RSI: 0000000000000001 RDI: ffff9796a3700000 [ 1109.405260] RBP: ffffaf3083ad7c50 R08: ffffffff9897de00 R09: ffff979688d9db60 [ 1109.405286] R10: 0000000000000000 R11: ffff979688d9db90 R12: 0000000000000001 [ 1109.405316] R13: ffff9796a3700000 R14: 0000000000000000 R15: ffff9796a3708fc0 [ 1109.405345] FS: 00007ff055cff180(0000) GS:ffff9796bfdc0000(0000) knlGS:0000000000000000 [ 1109.405378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1109.405400] CR2: 0000000000000078 CR3: 000000000a394000 CR4: 00000000000506e0 [ 1109.405434] Call Trace: [ 1109.405445] <TASK> [ 1109.405456] ? deleteobjectfull+0x1d/0x20 [ 1109.405480] amdgpuctxsetstablepstate+0x7c/0xa0 [amdgpu] [ 1109.405698] amdgpuctxfini.part.0+0xcb/0x100 [amdgpu] [ 1109.405911] amdgpuctxdorelease+0x71/0x80 [amdgpu] [ 1109.406121] amdgpuctxioctl+0x52d/0x550 [amdgpu] [ 1109.406327] ? _rawspinunlock+0x1a/0x30 [ 1109.406354] ? drmgemhandledelete+0x81/0xb0 [drm] [ 1109.406400] ? amdgpuctxgetentity+0x2c0/0x2c0 [amdgpu] [ 1109.406609] drmioctl_kernel+0xb6/0x140 [drm]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
79c65f3fcbb1288b84473d45e6d001820a971d54
Fixed
49ec3441aa5e5940f3e82dd2f0205b9c856e399d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
79c65f3fcbb1288b84473d45e6d001820a971d54
Fixed
eea5c7b3390c6e006ba4cbd906447dd8cea8cfbf

Affected versions

v5.*

v5.16
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "121153899060639319923838073168032101798",
            "length": 1492.0
        },
        "target": {
            "file": "drivers/gpu/drm/amd/pm/amdgpu_dpm.c",
            "function": "amdgpu_dpm_force_performance_level"
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eea5c7b3390c6e006ba4cbd906447dd8cea8cfbf",
        "id": "CVE-2022-49529-57686857",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "121153899060639319923838073168032101798",
            "length": 1492.0
        },
        "target": {
            "file": "drivers/gpu/drm/amd/pm/amdgpu_dpm.c",
            "function": "amdgpu_dpm_force_performance_level"
        },
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49ec3441aa5e5940f3e82dd2f0205b9c856e399d",
        "id": "CVE-2022-49529-62b5cae3",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "247056087942426993200919163344203323306",
                "232320251925090938211250395692444850518",
                "95339977857745480862015051874691351694",
                "228576749691334305093471296579270071174"
            ]
        },
        "target": {
            "file": "drivers/gpu/drm/amd/pm/amdgpu_dpm.c"
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eea5c7b3390c6e006ba4cbd906447dd8cea8cfbf",
        "id": "CVE-2022-49529-a93ebd2d",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "247056087942426993200919163344203323306",
                "232320251925090938211250395692444850518",
                "95339977857745480862015051874691351694",
                "228576749691334305093471296579270071174"
            ]
        },
        "target": {
            "file": "drivers/gpu/drm/amd/pm/amdgpu_dpm.c"
        },
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49ec3441aa5e5940f3e82dd2f0205b9c856e399d",
        "id": "CVE-2022-49529-cc9a460d",
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
5.18.3