CVE-2022-49645

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49645
In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix shrinker list corruption by madvise IOCTL Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240 Patch
https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1 Patch
https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0 Patch
https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912 Patch
https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*
History

23 Oct 2025, 12:09

Type Values Removed Values Added
CWE CWE-787
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/panfrost: Arreglar la corrupción de la lista de reductores por parte de madvise IOCTL Llamar a madvise IOCTL dos veces en BO provoca corrupción de la lista de reductores de memoria y bloquea el kernel porque BO ya está en la lista y se agrega a la lista nuevamente, mientras que BO debería eliminarse de la lista antes de volver a agregarse. Arréglalo.
References () https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240 - () https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240 - Patch
References () https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1 - () https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1 - Patch
References () https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0 - () https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0 - Patch
References () https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912 - () https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912 - Patch
References () https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4 - () https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-23 12:09

NVD link : CVE-2022-49645

Mitre link : CVE-2022-49645

CVE.ORG link : CVE-2022-49645

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write