What’s Vulnerable › Vulnerabilities

CVE-2022-50842: drm/virtio: Check whether transferred 2D BO is shmem

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO.

Affected products

• Linux kernel: 5.7 — fixed in 6.1

How to fix

Upgrade to a fixed version: Linux kernel 6.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/36e133af33ea54193378b190cf92c47c12a43d34
• https://git.kernel.org/stable/c/989164305b933af06d69bb91044dafbd01025371
• https://git.kernel.org/stable/c/e473216b42aa1fd9fc6b94b608b42c210c655908
• https://git.kernel.org/stable/c/f122bcb34f1a4b02ef3d95058d8fd1316ea03785
• https://git.kernel.org/stable/c/f134f261d76ae3d5ecf68db642eaa746ceb84cfb

Get alerted when CVE-2022-50842 or the next vulnerability affects your stack