In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gt: Cleanup partial engine discovery failures
If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have 'engine->release == NULL' and so will leak any of the common objects allocated.
v2: - Drop the destroypinnedcontext() helper for now. It's not really worth it with just a single callsite at the moment. (Janusz)
[
{
"deprecated": false,
"id": "CVE-2022-48893-139c5a1d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c855bcc730656c4b7d30aaddcd0eafc7003e112",
"digest": {
"line_hashes": [
"323559258223086161384081922176559746180",
"108674796206369477295226964097408161084",
"274457706668439303250819672531445032763",
"219082534053980531297471837445555096399",
"299897121024903678191391176124062439774"
],
"threshold": 0.9
},
"target": {
"file": "drivers/gpu/drm/i915/gt/intel_engine_cs.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2022-48893-65c21581",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c855bcc730656c4b7d30aaddcd0eafc7003e112",
"digest": {
"function_hash": "32014580264334019618372314520123445293",
"length": 707.0
},
"target": {
"function": "intel_engines_init",
"file": "drivers/gpu/drm/i915/gt/intel_engine_cs.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]