{
  "cveId": "CVE-2022-49133",
  "url": "https://patchblox.com/security/cve/CVE-2022-49133",
  "summary": "CVE-2022-49133 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49133, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amdkfd: svm range restore work deadlock when...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amdkfd: svm range restore work deadlock when process exit  kfd_process_notifier_release flush svm_range_restore_work which calls svm_range_list_lock_and_flush_work to flush deferred_list work, but if deferred_list work mmput release the last user, it will call exit_mmap -\u003E notifier_release, it is deadlock with below backtrace.  Move flush svm_range_restore_work to kfd_process_wq_release to avoid deadlock. Then svm_range_restore_work take task-\u003Emm ref to avoid mm is gone while validating and mapping ranges to GPU.  Workqueue: events svm_range_deferred_list_work [amdgpu] Call Trace:  wait_for_completion\u002B0x94/0x100  __flush_work\u002B0x12a/0x1e0  __cancel_work_timer\u002B0x10e/0x190  cancel_delayed_work_sync\u002B0x13/0x20  kfd_process_notifier_release\u002B0x98/0x2a0 [amdgpu]  __mmu_notifier_release\u002B0x74/0x1f0  exit_mmap\u002B0x170/0x200  mmput\u002B0x5d/0x130  svm_range_deferred_list_work\u002B0x104/0x230 [amdgpu]  process_one_work\u002B0x220/0x3c0",
  "published": "2025-02-26T07:00:50Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00265,
  "epssPercentile": 0.18553,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49133",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49133",
      "released": "2025-02-26T07:00:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49133",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49133",
      "released": "2025-02-26T07:00:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.17.3-1",
      "fix": "DEBIAN-CVE-2022-49133",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49133",
      "released": "2025-02-26T07:00:50Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}