What’s Vulnerable › Vulnerabilities

CVE-2022-48893: drm/i915/gt: Cleanup partial engine discovery failures

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-21 · updated 2026-06-17
• Weakness: CWE-459

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have 'engine->release == NULL' and so will leak any of the common objects allocated. v2: - Drop the destroy_pinned_context() helper for now. It's not really worth it with just a single callsite at the moment. (Janusz)

Affected products

• Linux kernel: before 6.1.7 — fixed in 6.1.7

How to fix

Upgrade to a fixed version: Linux kernel 6.1.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5c855bcc730656c4b7d30aaddcd0eafc7003e112
• https://git.kernel.org/stable/c/78350c36fb15afef423404a83dcbc5c558dce795
• https://git.kernel.org/stable/c/78a033433a5ae4fee85511ee075bc9a48312c79e
• https://git.kernel.org/stable/c/7d21587d35bc816c85a51b8686f0f7e8e676fb14
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Get alerted when CVE-2022-48893 or the next vulnerability affects your stack