CVE-2022-49966
drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
MEDIUM
5.5
CVSS Score
Published: June 18, 2025 at 11:00 AM UTC
Updated: August 15, 2026 at 01:36 PM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid To avoid any potential memory leak.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.11 ≤ v < 5.15.655.16 ≤ v < 5.19.75.9 ≤ v < 5.10.1415.9 ≤ v < 5.15.655.9 ≤ v < 5.19.75.9 ≤ v < 6.06.0 rc16f47116e57d6288e64e4e7a40db537f0d423826d
Vendor states this is fixed in 0a2d922a5618377cdf8fa476351362733ef55342 (fixed)
Vendor states this is fixed in 4d21584ac6392aa66171b7efd647ecd1a447556b (fixed)
Vendor states this is fixed in 60d522f317078381ff8a3599fe808f96fc256cd5 (fixed)
Vendor states this is fixed in a89e753d5a9f3b321f4a3098e2755c5aabcff0af (fixed)
Vendor states this is fixed in 5.10.141 (unaffected)
Vendor states this is fixed in 5.15.65 (unaffected)
Vendor states this is fixed in 5.19.7 (unaffected)
Vendor states this is fixed in 5.9 (unaffected)
Vendor states this is fixed in 6.0 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0a2d922a5618377cdf8fa476351362733ef55342Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4d21584ac6392aa66171b7efd647ecd1a447556bPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/60d522f317078381ff8a3599fe808f96fc256cd5Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a89e753d5a9f3b321f4a3098e2755c5aabcff0afCVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card