CVE-2022-49137: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj This issue takes place in an error path in amdgpu_cs_fence_to_handle_ioctl(). When `info->in.what` falls into default case, the function simply returns -EINVAL, forgetting to decrement the reference count of a dma_fence obj, which is bumped earlier by amdgpu_cs_get_fence(). This may result in reference count leaks. Fix it by decreasing the refcount of specific object before returning the error code.

Affected products

• Linux Linux Kernel: before 4.19.238 (fixed in 4.19.238); from 4.20, before 5.4.189 (fixed in 5.4.189); from 5.5, before 5.10.111 (fixed in 5.10.111); from 5.11, before 5.15.34 (fixed in 5.15.34); from 5.16, before 5.16.20 (fixed in 5.16.20); from 5.17, before 5.17.3 (fixed in 5.17.3)

Published 2025-02-26. Last modified 2026-08-13.