CVE-2022-49294

A flaw was found in the Linux kernel's AMD display driver. A missing validation check allows a division-by-zero error to occur during display clock calculations when an expected value is zero. A local user could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Service (DoS) of the system.

This vulnerability is rated as Moderate severity because it requires local system access and specific AMD graphics hardware to trigger, limiting the attack surface to systems equipped with affected GPUs. An authenticated local attacker could exploit the missing denominator validation in the AMD display subsystem to trigger a kernel panic, resulting in a local denial of service without compromising data confidentiality or system integrity. Enterprise server installations lacking AMD graphical adapters or running headless are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.