QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-48899

Back to search

CVE-2022-48899

Published: Aug 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done *after* we are done dereferencing the object.

VendorProductVersions

Linux

Linux

affected
62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 - < 19ec87d06acfab2313ee82b2a689bf0c154e57ea
affected
62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 - < d01d6d2b06c0d8390adf8f3ba08aa60b5642ef73
affected
62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 - < 68bcd063857075d2f9edfed6024387ac377923e2
affected
62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 - < 011ecdbcd520c90c344b872ca6b4821f7783b2f8
affected
62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 - < adc48e5e408afbb01d261bd303fd9fbbbaa3e317

+1 more versions

Linux

Linux

affected
4.4
unaffected
0 - < 4.4
unaffected
4.19.270 - <= 4.19.*
unaffected
5.4.229 - <= 5.4.*
unaffected
5.10.164 - <= 5.10.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now