PT-2022-7681 · Linux+2 · Linux Kernel+2

Stanley Yang · Published 2022-11-23 · Updated 2026-05-26 · CVE-2022-48990

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the amdgpu module. This vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is associated with the amdgpu job free cb() function in the drivers/gpu/drm/amd/amdgpu/amdgpu job.c file. The fw fence may not be initialized, and it is necessary to check if dma fence init is performed before job free. The vulnerability can be exploited during GPU recovery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

AZL-51348

BDU:2024-09785

CVE-2022-48990

OPENSUSE-SU-2024_4315-1

OPENSUSE-SU-2024_4376-1

SUSE-SU-2024:4315-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4376-1

Affected Products

Debian

Linux Kernel

Suse

References · 971

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48990.json · Exploit
• https://git.kernel.org/stable/c/3cb93f390453cde4d6afda1587aaa00e75e09617 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48990 · Vendor Advisory
• https://git.kernel.org/stable/c/d2a89cd942edd50c1e652004fd64019be78b0a96 · Patch
• https://bdu.fstec.ru/vul/2024-09785 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48990 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48990 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48990 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:4376-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4364-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4315-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-48990 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48990 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-48990 · Security Note
• https://osv.dev/vulnerability/AZL-51348 · Vendor Advisory