What’s Vulnerable › Vulnerabilities

CVE-2022-49645: drm/panfrost: Fix shrinker list corruption by madvise IOCTL

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-08-04
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix shrinker list corruption by madvise IOCTL Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it.

Affected products

• Linux kernel: from 5.4 before 5.4.207; from 5.5 before 5.10.132; from 5.11 before 5.15.56; from 5.16 before 5.18.13; 5.19-rc1, 5.19-rc2, 5.19-rc3, 5.19-rc4, 5.19-rc5, 5.19-rc6 — fixed in 5.10.132, 5.15.56, 5.18.13, 5.4.207

How to fix

Upgrade to a fixed version: Linux kernel 5.10.132, 5.15.56, 5.18.13, 5.4.207. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240
• https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1
• https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0
• https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912
• https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4

Get alerted when CVE-2022-49645 or the next vulnerability affects your stack