In the Linux kernel, the following vulnerability has been resolved:
drm/amd/amdgpu/amdgpucs: fix refcount leak of a dmafence obj
This issue takes place in an error path in
amdgpucsfencetohandleioctl(). When info->in.what falls into
default case, the function simply returns -EINVAL, forgetting to
decrement the reference count of a dmafence obj, which is bumped
earlier by amdgpucsget_fence(). This may result in reference count
leaks.
Fix it by decreasing the refcount of specific object before returning the error code.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49137.json",
"cna_assigner": "Linux"
}[
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-01a78c3e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@927beb05aaa429c883cc0ec6adc48964b187e291",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-0fd6af82",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3edd8646cb7c11b57c90e026bda6f21076223f5b",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1110.0,
"function_hash": "254716212387667700763707639496435558683"
},
"id": "CVE-2022-49137-1735367a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6d1f7d97c81ebaf2cda9c4c943ee2e484fffdcf",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1110.0,
"function_hash": "254716212387667700763707639496435558683"
},
"id": "CVE-2022-49137-2b194978",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3edd8646cb7c11b57c90e026bda6f21076223f5b",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1078.0,
"function_hash": "14346831285072217545695791888986016017"
},
"id": "CVE-2022-49137-425f417d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72d77ddb2224ebc00648f4f78f8a9a259dccbdf7",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-52d5b0e0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfced44f122c500004a48ecc8db516bb6a295a1b",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-56382464",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc2d5c0775c839e2b072884f4ee6a93ba410f107",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-6133c9b7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4009f104b02b223d1a11d74b36b1cc083bc37028",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1110.0,
"function_hash": "254716212387667700763707639496435558683"
},
"id": "CVE-2022-49137-67448001",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc2d5c0775c839e2b072884f4ee6a93ba410f107",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1112.0,
"function_hash": "290760193260248342137439948669336054799"
},
"id": "CVE-2022-49137-8b2c3da0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4009f104b02b223d1a11d74b36b1cc083bc37028",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-b120bcca",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72d77ddb2224ebc00648f4f78f8a9a259dccbdf7",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"291261637955978352733922839439235626755",
"129818725012633597363644327176464040924",
"156767081473394387158020388825653741373",
"230854622574928264560172461107740349273"
]
},
"id": "CVE-2022-49137-b1276c4f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6d1f7d97c81ebaf2cda9c4c943ee2e484fffdcf",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1110.0,
"function_hash": "254716212387667700763707639496435558683"
},
"id": "CVE-2022-49137-c4de0e34",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@927beb05aaa429c883cc0ec6adc48964b187e291",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1110.0,
"function_hash": "254716212387667700763707639496435558683"
},
"id": "CVE-2022-49137-d79ab853",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfced44f122c500004a48ecc8db516bb6a295a1b",
"target": {
"file": "drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"function": "amdgpu_cs_fence_to_handle_ioctl"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49137.json"