CVE-2022-50303Double Free in Linux

Severity
7.8HIGHNVD
EPSS
0.0%
top 95.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfd_process_device_init_vm returns failure after vm is converted to compute vm and vm->pasid set to compute pasid, KFD will not take pdd->drm_file reference. As a result, drm close file handler maybe called to release the compute pasid before KFD process destroy worker to release the same pasid and set vm->pasid to zero, this generates below WARNING backtrace and NULL pointer acc

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Patches

🔴Vulnerability Details

2
GHSA
GHSA-ppmr-4j3r-434x: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfd_process_device_init_vm retur2025-09-15
OSV
CVE-2022-50303: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfd_process_device_init_vm returns2025-09-15

📋Vendor Advisories

3
Red Hat
kernel: drm/amdkfd: Fix double release compute pasid2025-09-15
Microsoft
drm/amdkfd: Fix double release compute pasid2025-09-09
Debian
CVE-2022-50303: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:...2022
CVE-2022-50303 — Double Free in Linux | cvebase