CVE WatchAug 4, 2026

CVE-2022-50354

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd_process_device_init_vm error handling Should only

CVSS

7.8

High

EPSS

0.2%

p10

KEV

—

Exploit Today

0-100

Published: Sep 17, 2025 · Last modified: Aug 4, 2026 · CWE-476

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-152026-08-11

Technical description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd_process_device_init_vm error handling Should only destroy the ib_mem and let process cleanup worker to free the outstanding BOs. Reset the pointer in pdd->qpd structure, to avoid NULL pointer access in process destroy worker. BUG: kernel NULL pointer dereference, address: 0000000000000010 Call Trace: amdgpu_amdkfd_gpuvm_unmap_gtt_bo_from_kernel+0x46/0xb0 [amdgpu] kfd_process_device_destroy_cwsr_dgpu+0x40/0x70 [amdgpu] kfd_process_destroy_pdds+0x71/0x190 [amdgpu] kfd_process_wq_release+0x2a2/0x3b0 [amdgpu] process_one_work+0x2a1/0x600 worker_thread+0x39/0x3d0

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-186996.5 MED

—

——0An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connected clients and in-flight operations.1d CVE-2026-656817.5 HIG

—

——0Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.1d CVE-2026-627026.8 MED

—

——0Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.1d CVE-2026-613456.5 MED

—

——0Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.13h CVE-2026-591386.5 MED

—

——0Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.11h CVE-2026-591327.5 HIG

—

——0Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.11h