CVE-2022-48774
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-48774 affects the Linux kernel's DMA engine subsystem, specifically in the PTDMA driver. The vulnerability was discovered and disclosed on July 16, 2024, involving an error handling path issue in the ptcoreinit() function. The vulnerability affects the AMD PTDMA driver implementation in the Linux kernel (NVD).

Technical details

The vulnerability exists in the error handling path of ptcoreinit() function where two goto statements were incorrectly ordered. This caused resource leaks and attempts to release unallocated resources. Additionally, there was a misplaced error message (dev_err()) that needed to be moved to a more appropriate location. The issue was introduced in the initial PTDMA driver implementation (Kernel Commit).

Impact

The vulnerability could lead to resource leaks in the system and potential memory corruption due to attempts to free unallocated resources. This affects systems using the AMD PTDMA driver in the Linux kernel (NVD).

Mitigation and workarounds

The issue has been fixed through a patch that corrects the order of goto statements in the error handling path and relocates the error message to a more appropriate location. The fix has been implemented in the kernel source tree (Kernel Commit).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-64k-devel
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-kvm
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-modules-partner
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • python3-perf
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management