Riskcovery

CVE-2022-48899

drm/virtio: Fix GEM handle creation UAF

State
Published
Severity
7.8 High
Published
Aug 21, 2024
Updated
Aug 5, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Fix GEM handle creation UAF

Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done *after* we are done dereferencing the object.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 19ec87d06acfab2313ee82b2a689bf0c154e57eaAffected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before d01d6d2b06c0d8390adf8f3ba08aa60b5642ef73Affected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 68bcd063857075d2f9edfed6024387ac377923e2Affected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 011ecdbcd520c90c344b872ca6b4821f7783b2f8Affected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before adc48e5e408afbb01d261bd303fd9fbbbaa3e317Affected
  • 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 to before 52531258318ed59a2dc5a43df2eaf0eb1d65438eAffected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 4.19.270 through 4.19.*Not affected
  • 5.4.229 through 5.4.*Not affected
  • 5.10.164 through 5.10.*Not affected
  • 5.15.89 through 5.15.*Not affected
  • 6.1.7 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.