CVE-2022-4139CWE-281CWE-401

CVE-2022-4139

High · published January 27, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.7th percentile
Weaknesses
CWE-281 · Improper Preservation of Permissions; CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2023-01-27T23:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4, < 5.4.2265.4.226
linux/linux_kernel≥ 5.5, < 5.10.1575.10.157
linux/linux_kernel≥ 5.11, < 5.15.815.15.81
linux/linux_kernel≥ 5.16, < 6.0.116.0.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
https://bugzilla.redhat.com/show_bug.cgi?id=2147572 · [email protected]https://security.netapp.com/advisory/ntap-20230309-0004/ · [email protected]https://www.openwall.com/lists/oss-security/2022/11/30/1 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2147572 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20230309-0004/ · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2022/11/30/1 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 27 JAN 00:00Z
    An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks
    cvelistv5