Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2022-48899
HistoryAug 21, 2024 - 6:10 a.m.

CVE-2022-48899 drm/virtio: Fix GEM handle creation UAF

2024-08-2106:10:31
Linux
github.com
linux kernel
vulnerability
fixed
drm/virtio
gem handle creation
use-after-free

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Fix GEM handle creation UAF

Userspace can guess the handle value and try to race GEM object creation
with handle close, resulting in a use-after-free if we dereference the
object after dropping the handle’s reference. For that reason, dropping
the handle’s reference must be done after we are done dereferencing
the object.

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial