CVE-2022-50528: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50528 is a vulnerability in the Linux kernel affecting the drm/amdkfd component, discovered and disclosed on October 7, 2025. The vulnerability specifically involves memory leakage and potential segmentation faults in the gpuvmimport_dmabuf() function (NVD, Red Hat).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Low severity) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. It is classified under CWE-772 and affects the memory management functionality in the AMD Kernel Fusion Driver (amdkfd) component (Red Hat).

The vulnerability can lead to memory leakage and potential segmentation faults in the affected systems. While the confidentiality and integrity impacts are rated as none, the availability impact is rated as high according to the CVSS scoring (Red Hat).

Several Linux distributions have released fixes for this vulnerability. Ubuntu has fixed it in linux-hwe-5.15 version 5.15.0-69.76~20.04.1, and Red Hat has addressed it in RHEL 8 with kernel-0:4.18.0-513.5.1.el89 and RHEL 9 with kernel-0:5.14.0-362.8.1.el93 (Ubuntu, Red Hat).