CVE-2022-50527 drm/amdgpu: Fix size validation for non-exclusive domains (v4)
A null pointer dereference in the AMD GPU driver allows local attackers to cause a kernel crash, resulting in denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50527?
CVE-2022-50527 is a medium-severity vulnerability in Linux kernel, published on 7 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix size validation for non-exclusive domains (v4)
Fix amdgpu_bo_validate_size() to check whether the TTM domain manager for the requested memory exists, else we get a kernel oops when dereferencing "man".
v2: Make the patch standalone, i.e. not dependent on local patches. v3: Preserve old behaviour and just check that the manager pointer is not NULL. v4: Complain if GTT domain requested and it is uninitialized--most likely a bug.
Weakness: CWE-476
Which versions are affected by CVE-2022-50527?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-50527?
Apply the vendor's patch.
Is CVE-2022-50527 being exploited?
There is no known exploitation of CVE-2022-50527 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-76622, DEBIAN-CVE-2022-50527, GHSA-crpq-gx68-2jwq, ROOT-OS-DEBIAN-11-CVE-2022-50527, ROOT-OS-UBUNTU-2204-CVE-2022-50527, UBUNTU-CVE-2022-50527.