CVE-2022-49530drm/amd/pm: fix double free in si_parse_power_table()
- 7.8HighCVSS base score
- 0.28%Exploitation in 30 daysEPSS · top 79% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table(), array adev->pm.dpm.ps and its member is allocated. If the allocation of each member fails, the array itself is freed and returned with an error code. However, the array is later freed again in si_dpm_fini() function which is called when the function returns an error. This leads to potential double free of the array adev->pm.dpm.ps, as well as leak of its array members, since the members are not freed in the allocation function and the array is not nulled when freed. In addition adev->pm.dpm.num_ps, which keeps track of the allocated array member, is not updated until the member allocation is successfully finished, this could also lead to either use after free, or uninitialized variable access in si_dpm_fini(). Fix this by postponing the free of the array until si_dpm_fini() and increment adev->pm.dpm.num_ps everytime the array member is allocated.
Timeline
ID reserved
By Linux
Published
- 18 months later
· 18 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CISA-ADPADP (enrichment) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 79% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < 2615464854505188f909d0c07c37a6623693b5c7
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < 6c5bdaa1325be7f04b79ea992ab216739192d342
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < c0e811c4ccf3b42705976285e3a94cc82dea7300
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < af832028af6f44c6c45645757079c4ed6884ade5
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < ca1ce206894dd976275c78ee38dbc19873f22de9
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < a5ce7051db044290b1a95045ff03c249005a3aa4
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < fd2eff8b9dcbe469c3b7bbbc7083ab5ed94de07b
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < 43eb9b667b95f2a31c63e8949b0d2161b9be59c3
- affected 841686df9f7d2942cfd94d024b8591fa3f74ef7c – < f3fa2becf2fc25b6ac7cf8d8b1a2e4a86b3b72bd
- affected 4.9
- unaffected < 4.9
- unaffected 4.9.318 – ≤ 4.9.*
- unaffected 4.14.283 – ≤ 4.14.*
- unaffected 4.19.247 – ≤ 4.19.*
- unaffected 5.4.198 – ≤ 5.4.*
- unaffected 5.10.121 – ≤ 5.10.*
- unaffected 5.15.46 – ≤ 5.15.*
- unaffected 5.17.14 – ≤ 5.17.*
- unaffected 5.18.3 – ≤ 5.18.*
- unaffected 5.19 – ≤ *
References
References9
- https://git.kernel.org/stable/c/2615464854505188f909d0c07c37a6623693b5c7 (opens in a new tab)
- https://git.kernel.org/stable/c/6c5bdaa1325be7f04b79ea992ab216739192d342 (opens in a new tab)
- https://git.kernel.org/stable/c/c0e811c4ccf3b42705976285e3a94cc82dea7300 (opens in a new tab)
- https://git.kernel.org/stable/c/af832028af6f44c6c45645757079c4ed6884ade5 (opens in a new tab)
- https://git.kernel.org/stable/c/ca1ce206894dd976275c78ee38dbc19873f22de9 (opens in a new tab)
- https://git.kernel.org/stable/c/a5ce7051db044290b1a95045ff03c249005a3aa4 (opens in a new tab)
- https://git.kernel.org/stable/c/fd2eff8b9dcbe469c3b7bbbc7083ab5ed94de07b (opens in a new tab)
- https://git.kernel.org/stable/c/43eb9b667b95f2a31c63e8949b0d2161b9be59c3 (opens in a new tab)
- https://git.kernel.org/stable/c/f3fa2becf2fc25b6ac7cf8d8b1a2e4a86b3b72bd (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-54700 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-49530)Record last updated .