CVE-2022-49137

Summary

CVE-2022-44137 is a vulnerability affecting the Linux kernel. In the amdgpu driver, an error in the function amdgpu_cs_fence_to_handle_ioctl() causes a refcount leak of a dma_fence object. When the input parameter "what" is in the default case, the function fails to decrement the reference count of the object before returning an error code. This oversight may lead to reference count leaks, potentially causing issues in the system. The vulnerability has been rectified by decreasing the reference count of the affected object prior to returning the error.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.