CVE-2022-49645

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	013b6510131568ce4e01856d5360bfdfe9c3632f to before 393594aad55179eb761af41533d8d1d6eb4543b0Affected 013b6510131568ce4e01856d5360bfdfe9c3632f to before 0581613df7f9a4c5fac096ce1d5fb15b7b994240Affected 013b6510131568ce4e01856d5360bfdfe9c3632f to before 1807d8867402a58b831a7fc16832747ff559a0d1Affected 013b6510131568ce4e01856d5360bfdfe9c3632f to before f036392edd9c49090781d8cca26ad6557a63bae4Affected 013b6510131568ce4e01856d5360bfdfe9c3632f to before 9fc33eaaa979d112d10fea729edcd2a2e21aa912Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.207 through 5.4.Not affected 5.10.132 through 5.10.Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

013b6510131568ce4e01856d5360bfdfe9c3632f to before 393594aad55179eb761af41533d8d1d6eb4543b0Affected
013b6510131568ce4e01856d5360bfdfe9c3632f to before 0581613df7f9a4c5fac096ce1d5fb15b7b994240Affected
013b6510131568ce4e01856d5360bfdfe9c3632f to before 1807d8867402a58b831a7fc16832747ff559a0d1Affected
013b6510131568ce4e01856d5360bfdfe9c3632f to before f036392edd9c49090781d8cca26ad6557a63bae4Affected
013b6510131568ce4e01856d5360bfdfe9c3632f to before 9fc33eaaa979d112d10fea729edcd2a2e21aa912Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.207 through 5.4.*Not affected
5.10.132 through 5.10.*Not affected
5.15.56 through 5.15.*Not affected
5.18.13 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.