CVE-2022-49133: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49133 affects the Linux kernel, specifically in the drm/amdkfd component. The vulnerability involves a deadlock condition that occurs when a process exits while handling svm range restore work. This issue was discovered in the kfdprocessnotifierrelease function which flushes svmrangerestorework, potentially leading to a deadlock situation when deferred_list work releases the last user (Kernel Git).

The vulnerability occurs in the kfdprocessnotifierrelease function when it attempts to flush svmrangerestorework. The deadlock happens because if deferredlist work mmput releases the last user, it triggers a call sequence through exitmmap -> notifierrelease. The issue manifests in the following call trace: waitforcompletion -> _flushwork -> _cancelworktimer -> canceldelayedworksync -> kfdprocessnotifierrelease -> _mmunotifierrelease -> exitmmap -> mmput -> svmrangedeferredlistwork -> processonework (Kernel Git).

The vulnerability can result in a system deadlock when a process exits while handling svm range restore work, potentially affecting system stability and performance (Ubuntu Security).

The issue has been fixed by moving the flush svmrangerestorework operation to kfdprocesswqrelease to avoid the deadlock. Additionally, svmrangerestore_work now takes a task->mm reference to prevent the memory management structure from being released while validating and mapping ranges to GPU (Kernel Git).