CVE-2022-49645CWE-787

CVE-2022-49645

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

Calling madvise IOCTL twice on BO causes memory shrinker list corruption

and crashes kernel because BO is already on the list and it's added to

the list again, while BO should be removed from the list before it's

re-added. Fix it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-02-26T12:01Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4, < 5.4.2075.4.207
linux/linux_kernel≥ 5.5, < 5.10.1325.10.132
linux/linux_kernel≥ 5.11, < 5.15.565.15.56
linux/linux_kernel≥ 5.16, < 5.18.135.18.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 FEB 02:23Z
    drm/panfrost: Fix shrinker list corruption by madvise IOCTL
    cvelistv5