CVE-2022-49137

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj

This issue takes place in an error path in amdgpu_cs_fence_to_handle_ioctl(). When info->in.what falls into default case, the function simply returns -EINVAL, forgetting to decrement the reference count of a dma_fence obj, which is bumped earlier by amdgpu_cs_get_fence(). This may result in reference count leaks.

Fix it by decreasing the refcount of specific object before returning the error code.

This vulnerability is rated as Moderate impact because exploitation requires local access on systems equipped with AMD graphics hardware and is limited to causing a denial of service. On typical Red Hat Enterprise Linux server deployments lacking AMD GPU devices or graphical stacks, the affected driver is not loaded and systems remain unaffected. For installations with active AMD graphics adapters, a local authenticated user could repeatedly trigger the leak to consume system memory, but the issue does not permit privilege escalation or confidentiality compromises.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.