Linux CVE-2022-50528

This vulnerability resides in the AMD KFD GPU virtualization memory management code (drm/amdkfd subsystem) within the Linux kernel. The root cause is classified as CWE-401 (Missing Release of Memory after Effective Lifetime), indicating improper cleanup of dynamically allocated memory within the _gpuvm_import_dmabuf() function. When processing DMA buffer imports for GPU virtual memory, the function fails to properly release allocated memory under certain error conditions, leading to heap corruption and potential segmentation faults. AMD KFD is a core component of AMD GPU support in Linux, affecting systems with AMD GPUs that rely on kernel-level memory management for GPU-CPU coherence. The affected product is the Linux kernel itself (identified via multiple CPE entries for linux:linux_kernel), which is the foundational operating system component used across virtually all Linux distributions.