CVE-2022-48981

drm/shmem-helper: Remove errant put in error path

State: Published
Severity: 7.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/shmem-helper: Remove errant put in error path

drm_gem_shmem_mmap() doesn't own this reference, resulting in the GEM object getting prematurely freed leading to a later use-after-free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2194a63a818db71065ebe09c8104f5f021ca4e7b to before 585a07b820059462e0c93b76c7de2cd946b26b40Affected 2194a63a818db71065ebe09c8104f5f021ca4e7b to before 6a4da05acd062ae7774b6b19cef2b7d922902d36Affected 2194a63a818db71065ebe09c8104f5f021ca4e7b to before 83e3da8bb92fcfa7a1d232cf55f9e6c49bb84942Affected 2194a63a818db71065ebe09c8104f5f021ca4e7b to before 586847b98e20ab02212ca5c1fc46680384e68a28Affected 2194a63a818db71065ebe09c8104f5f021ca4e7b to before 24013314be6ee4ee456114a671e9fa3461323de8Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.227 through 5.4.Not affected 5.10.159 through 5.10.Not affected 5.15.83 through 5.15.Not affected 6.0.13 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

2194a63a818db71065ebe09c8104f5f021ca4e7b to before 585a07b820059462e0c93b76c7de2cd946b26b40Affected
2194a63a818db71065ebe09c8104f5f021ca4e7b to before 6a4da05acd062ae7774b6b19cef2b7d922902d36Affected
2194a63a818db71065ebe09c8104f5f021ca4e7b to before 83e3da8bb92fcfa7a1d232cf55f9e6c49bb84942Affected
2194a63a818db71065ebe09c8104f5f021ca4e7b to before 586847b98e20ab02212ca5c1fc46680384e68a28Affected
2194a63a818db71065ebe09c8104f5f021ca4e7b to before 24013314be6ee4ee456114a671e9fa3461323de8Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.227 through 5.4.*Not affected
5.10.159 through 5.10.*Not affected
5.15.83 through 5.15.*Not affected
6.0.13 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.