Linux kernel amdgpu power management (SMU/powerplay) (drm/amdgpu/powerplay/psm): A memory or reference-count leak

UnscoredCVE-2022-50617NVIDIA / GPU stackcurated

Impact

A memory or reference-count leak in the amdgpu power management (SMU/powerplay). Each pass through the affected path drops an allocation or a refcount on the floor. A tenant that loops the operation drives the node into memory exhaustion or pins objects that can never be freed, which on a long-lived GPU host shows up as creeping unreclaimable memory, failed allocations for other tenants, and eventually an OOM kill or a driver that will not unbind. Refcount leaks that wrap can also degrade into use-after-free. Upstream fix: drm/amdgpu/powerplay/psm: Fix memory leak in power state init

Who can reach it

Local. Reachable by a local user with root or with write access to the amdgpu sysfs/debugfs power interfaces; on most clusters that means a compromised node agent or a privileged DaemonSet, not a plain tenant pod. Not reachable over the network and not reachable from a container that has no GPU device node mapped in.

What to do

Kernel-side fix: this lands in mainline Linux and flows into distro kernels (RHEL/Rocky, Ubuntu HWE, SLES) and into AMD's out-of-tree DKMS amdgpu package shipped with ROCm. Patch the kernel or the DKMS module, then **reload the amdgpu module or reboot the node** - you cannot fix a running driver in place. Reloading amdgpu requires no process holding /dev/kfd or a render node, so in practice this is a cordon + drain + reboot per node. Plan it as a rolling maintenance across the fleet; there is no VBIOS flash, no SBIOS/AGESA step and no firmware update involved. Nodes running the ROCm DKMS stack often lag mainline by a release or two, so confirm the fix is actually present in the AMD driver version you deploy rather than assuming a new distro kernel covers it.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-50617 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.