drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Linux Linux)

CVE-2022-49966
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.24 % · percentile 16 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid To avoid any potential memory leak.

Weaknesses (CWE)

  • CWE-401 — Missing Release of Memory after Effective Lifetime

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 6f47116e57d6288e64e4e7a40db537f0d423826d < 60d522f317078381ff8a3599fe808f96fc256cd5 ; affected 6f47116e57d6288e64e4e7a40db537f0d423826d < a89e753d5a9f3b321f4a3098e2755c5aabcff0af ; affected 6f47116e57d6288e64e4e7a40db537f0d423826d < 4d21584ac6392aa66171b7efd647ecd1a447556b ; affected 6f47116e57d6288e64e4e7a40db537f0d423826d < 0a2d922a5618377cdf8fa476351362733ef55342
Linux · Linuxaffected 5.9 ; unaffected 0 < 5.9 ; unaffected 5.10.141 ≤ 5.10.* ; unaffected 5.15.65 ≤ 5.15.* ; unaffected 5.19.7 ≤ 5.19.* ; unaffected 6.0 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD