NetSight
IP …
high7.8

CVE-2022-48899

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to rac…

Impact

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done *after* we are done dereferencing the object.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4 before 4.19.270
from 4.20 before 5.4.229
from 5.5 before 5.10.164
from 5.11 before 5.15.89
from 5.16 before 6.1.7
Version 6.2

Weakness classification

CWE-416

References