CVE-2022-50303: linux kernel from 3.19 (inclusive), before 6.0.19 (exclusive), from 6.1 (inclusive), before 6.1.5 (exclusive); +1 more…

Affected technology

linux kernel · from 3.19 (inclusive), before 6.0.19 (exclusive)
linux

linux kernel · from 6.1 (inclusive), before 6.1.5 (exclusive)
linux

Linux · 1685b01a858872075bc258a350153de0c7e95404 to before 89f0d766c9e3fdeafbed6f855d433c2768cde862, 1685b01a858872075bc258a350153de0c7e95404 to before a02c07b619899179384fde06f951530438a3512d, 1685b01a858872075bc258a350153de0c7e95404 to before 1a799c4c190ea9f0e81028e3eb3037ed0ab17ff5
Linux

Linux · 4.20
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h, drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c, drivers/gpu/drm/amd/amdkfd/kfd_process.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.