CVE-2022-49829

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49829
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49829.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49829
Downstream
Related
Published
2025-05-01T14:09:48Z
Modified
2025-10-29T20:23:31.398421Z
Summary
drm/scheduler: fix fence ref counting
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/scheduler: fix fence ref counting

We leaked dependency fences when processes were beeing killed.

Additional to that grab a reference to the last scheduled fence.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8ee3a52e3f35e064a3bf82f21dc74ddaf9843648
Fixed
e5f4b38362df93594cb426b04979d8834122f159
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8ee3a52e3f35e064a3bf82f21dc74ddaf9843648
Fixed
b3af84383e7abdc5e63435817bb73a268e7c3637

Affected versions

v4.*

v4.16
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7

v5.*

v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1-rc1
v6.1-rc2

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3af84383e7abdc5e63435817bb73a268e7c3637",
        "id": "CVE-2022-49829-19151baf",
        "deprecated": false,
        "target": {
            "function": "drm_sched_entity_kill_jobs",
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 617.0,
            "function_hash": "45744746834259902457575659441983426569"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5f4b38362df93594cb426b04979d8834122f159",
        "id": "CVE-2022-49829-2deb1429",
        "deprecated": false,
        "target": {
            "function": "drm_sched_entity_kill_jobs_cb",
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 240.0,
            "function_hash": "208629292612315072302805219788446905948"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3af84383e7abdc5e63435817bb73a268e7c3637",
        "id": "CVE-2022-49829-2f89f41a",
        "deprecated": false,
        "target": {
            "function": "drm_sched_entity_kill_jobs_cb",
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 240.0,
            "function_hash": "208629292612315072302805219788446905948"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5f4b38362df93594cb426b04979d8834122f159",
        "id": "CVE-2022-49829-4fde4939",
        "deprecated": false,
        "target": {
            "function": "drm_sched_entity_kill_jobs",
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 617.0,
            "function_hash": "45744746834259902457575659441983426569"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3af84383e7abdc5e63435817bb73a268e7c3637",
        "id": "CVE-2022-49829-928e9fa6",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20840968560324666702029058402356256046",
                "77344804542298997006449659082092837975",
                "105639724023412165038224176385421804879",
                "280400281316024522769982252248998616988",
                "80858026720981180514751272260087075470",
                "300202246175540834128392084294239168560",
                "160562233325474514896908146973125550481",
                "325107530256125944782465612764841210364",
                "184888577496151998011151840414316453535",
                "333909241853917789126863105940322137743",
                "282126865330598630408552615190381373022"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e5f4b38362df93594cb426b04979d8834122f159",
        "id": "CVE-2022-49829-a74fe92e",
        "deprecated": false,
        "target": {
            "file": "drivers/gpu/drm/scheduler/sched_entity.c"
        },
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20840968560324666702029058402356256046",
                "77344804542298997006449659082092837975",
                "105639724023412165038224176385421804879",
                "280400281316024522769982252248998616988",
                "80858026720981180514751272260087075470",
                "300202246175540834128392084294239168560",
                "160562233325474514896908146973125550481",
                "325107530256125944782465612764841210364",
                "184888577496151998011151840414316453535",
                "333909241853917789126863105940322137743",
                "282126865330598630408552615190381373022"
            ]
        },
        "signature_type": "Line"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.18.0
Fixed
6.0.10