PT-2025-8061 · Linux+3 · Linux Kernel+3

Ruili Ji · Published 2022-01-01 · Updated 2026-05-26 · CVE-2022-49133

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/amdkfd component. The problem occurs when the svm range restore work is flushed during process exit, leading to a potential deadlock. This happens because the kfd process notifier release function calls svm range list lock and flush work to flush deferred list work, but if the deferred list work mmput releases the last user, it will call exit mmap -> notifier release, resulting in a deadlock. The issue is resolved by moving the flush of svm range restore work to kfd process wq release to avoid the deadlock. Additionally, svm range restore work takes a task->mm ref to prevent the mm from being gone while validating and mapping ranges to the GPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2026-01538

CVE-2022-49133

SUSE-SU-2025:1176-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 1305

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49133.json · Exploit
• https://git.kernel.org/stable/c/a6be83086e91891081e0589e4b4645bf4643e897 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-49133 · Vendor Advisory
• https://git.kernel.org/stable/c/858822905f4bf44100d63c5e22e263109976f7cb · Patch
• https://bdu.fstec.ru/vul/2026-01538 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49133 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49133 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-49133 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49133 · Vendor Advisory
• https://git.kernel.org/stable/c/6225bb3a88d22594aacea2485dc28ca12d596721 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49133 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49133 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49133 · Vendor Advisory