What’s Vulnerable › Vulnerabilities

CVE-2022-48899: drm/virtio: Fix GEM handle creation UAF

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-21 · updated 2026-08-04
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done *after* we are done dereferencing the object.

Affected products

• Linux kernel: from 4.4 before 4.19.270; from 4.20 before 5.4.229; from 5.5 before 5.10.164; from 5.11 before 5.15.89; from 5.16 before 6.1.7; 6.2-rc1, 6.2-rc2, 6.2-rc3 — fixed in 4.19.270, 5.10.164, 5.15.89, 5.4.229, 6.1.7

How to fix

Upgrade to a fixed version: Linux kernel 4.19.270, 5.10.164, 5.15.89, 5.4.229. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/011ecdbcd520c90c344b872ca6b4821f7783b2f8
• https://git.kernel.org/stable/c/19ec87d06acfab2313ee82b2a689bf0c154e57ea
• https://git.kernel.org/stable/c/52531258318ed59a2dc5a43df2eaf0eb1d65438e
• https://git.kernel.org/stable/c/68bcd063857075d2f9edfed6024387ac377923e2
• https://git.kernel.org/stable/c/adc48e5e408afbb01d261bd303fd9fbbbaa3e317
• https://git.kernel.org/stable/c/d01d6d2b06c0d8390adf8f3ba08aa60b5642ef73

Get alerted when CVE-2022-48899 or the next vulnerability affects your stack