CVE-2022-49069

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An incorrect initialization in the dcn31 validate bandwidth() function within the drivers/gpu/drm/amd/display/dc/dcn31/dcn31 resource.c module of the AMD Direct Rendering Infrastructure (DRI) driver can lead to a denial of service. The issue occurs because the populate dml pipes function uses double-precision floating-point numbers for initialization without proper Floating Point Unit (FPU) protection. This can cause a general protection fault due to context switches and the loss of VBA context, particularly when DRM debug logs are enabled and set to 0x1f. A real-world instance of this issue was observed as a general protection fault when running WebGL Aquarium for an extended period.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.