Memory Leak Issue in Linux Kernel Affecting AMD Graphics Driver

CVE-2022-50619

What is CVE-2022-50619?

A memory leak vulnerability exists in the Linux kernel affecting the AMD graphics driver. This issue occurs when the number of pages from a user pointer buffer object (BO) differs from the scatter-gather (SG) buffer object. In certain error paths, allocated memory for the SG table does not get properly freed, resulting in a potential memory leak. The vulnerability has been addressed by implementing a check on the number of pages before memory allocation for the SG table, effectively preventing unnecessary memory consumption during error handling cases.

References