CVE-2022-50393

A denial of service exists in the linux kernel such that there is a SDMA update page table may be called from an unlocked context, leading to damage to system availability and integrity.

A MODERATE severity denial-of-service vulnerability was found in the Linux kernel AMD GPU (amdgpu) driver. During CPU page table invalidation (for example when process memory is unmapped), the amdgpu shared virtual memory (SVM) range unmapping code can invoke the SDMA page table update path from a context that does not hold the required dma-resv lock, which triggers a kernel WARNING in the dma_resv iterator. A local user with low privileges could use this flaw to adversely affect system availability. Red Hat assigned a CVSS 3.1 score of 4.7 (AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting the local attack vector, high attack complexity, and availability-only impact; this differs from the CVEORG record score of 7.8, which includes confidentiality and integrity impacts that are not supported by the technical evidence for this issue. In Red Hat Enterprise Linux, kernel and kernel-rt in the RHEL 8 and RHEL 9 streams are recorded as affected, with resolution delegated to the kernel maintenance team, which is pursuing the assessment and handling of this issue. The kernel and kernel-rt packages in RHEL 6, RHEL 7, and RHEL 10, as well as Red Hat In-Vehicle OS, are not affected because the vulnerable code is not present in those products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.