Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — drm/amdkfd: Fix kfd_process_device_init_vm error handling
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0021 11.7 —
AFFECTED
Product Versions Fixed
Linux 68df0f195a689bbb0f92bfeadee6edd90c79c31f – —
Linux 5.16 – 6.0.19
TIMELINE
Sep 17 Reserved by Linux
Sep 17 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2022-50354 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix kfd_process_device_init_vm error handling
Should only destroy the ib_mem and let process cleanup worker to free
the outstanding BOs. Reset the pointer in pdd->qpd structure, to avoid
NULL pointer access in process destroy worker.
BUG: kernel NULL pointer dereference, address: 0000000000000010
Call Trace:
amdgpu_amdkfd_gpuvm_unmap_gtt_bo_from_kernel+0x46/0xb0 [amdgpu]
kfd_process_device_destroy_cwsr_dgpu+0x40/0x70 [amdgpu]
kfd_process_destroy_pdds+0x71/0x190 [amdgpu]
kfd_process_wq_release+0x2a2/0x3b0 [amdgpu]
process_one_work+0x2a1/0x600
worker_thread+0x39/0x3d0
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| September 17, 2025 | Reserved | Reserved by Linux |
| September 17, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-50354 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 68df0f195a689bbb0f92bfeadee6edd90c79c31f | — |
| Linux | Linux | — | 5.16 | 6.0.19 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-50354 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.