habanalabs kernel driver (MMU shadow teardown): A memory leak on the habanalabs MMU teardown path
Impact
A memory leak on the habanalabs MMU teardown path. Each affected teardown leaks host-resident shadow page-table memory, so a tenant that repeatedly opens and closes the device can grind the node into OOM over a long-running shift. Slow-burn availability problem, not a confidentiality one.
Who can reach it
Local user with the habanalabs device node - repeated device open/close cycles are enough.
What to do
Fix ships in the Linux kernel. Update the kernel and reboot the node - in practice this is a drain plus reboot because the accelerator driver cannot be unloaded while jobs hold device file descriptors. No BIOS or firmware update needed.
References
Related entries
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreCVE-2022-49135 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amd/amdgpu/amdgpu_cs): A memory or reference-countCVE-2022-49137 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amd/amdgpu/amdgpu_cs)Medium
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A NULL pointer dereference in the amdgpu display coreCVE-2022-49232 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A memory or reference-count leak in the amdgpu display coreCVE-2022-49233 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
- Linux kernel amdgpu display core (DC/DM) (drm/amd/display): A division by zero in the amdgpu display core (DC/DM)CVE-2022-49294 · Linux kernel amdgpu display core (DC/DM) (drm/amd/display)Medium
- Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/cs): Missing or insufficient validation ofCVE-2022-49335 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu/cs)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.