CVE-2022-49135

drm/amd/display: Fix memory leak

MEDIUM
5.5
CVSS Score
Published: February 26, 2025 at 01:55 AM UTC
Updated: August 13, 2026 at 12:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak [why] Resource release is needed on the error handling path to prevent memory leak. [how] Fix this by adding kfree on the error handling path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.15.344.19 ≤ v < 5.10.2584.19 ≤ v < 5.15.344.19 ≤ v < 5.16.204.19 ≤ v < 5.17.34.19 ≤ v < 5.185.16 ≤ v < 5.16.205.17 ≤ v < 5.17.34.19f8ac2cf78f276b4d9fc0bc6b90f5e3560caa11de
Vendor states this is fixed in 3ce1497add6d17b48cc9df65095bd20202d93994 (fixed)
Vendor states this is fixed in 5076315aaddd640bde896ec8d79423ed8ec83a59 (fixed)
Vendor states this is fixed in 5d5c6dba2b43e28845d7d7ed32a36802329a5f52 (fixed)
Vendor states this is fixed in 7e10369c72db7a0e2f77b2e306aadc07aef6b07a (fixed)
Vendor states this is fixed in 9d0bef3cc22cf250278ed45b829f062a00af9e27 (fixed)
Vendor states this is fixed in 4.19 (unaffected)
Vendor states this is fixed in 5.10.258 (unaffected)
Vendor states this is fixed in 5.15.34 (unaffected)
Vendor states this is fixed in 5.16.20 (unaffected)
Vendor states this is fixed in 5.17.3 (unaffected)
Vendor states this is fixed in 5.18 (unaffected)

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card