CVE-2022-4139

HIGH

Linux Kernel < 5.4.226 - Memory Leak

Title source: rule

Description

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

References (3)

[Issue Tracking, Patch, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=2147572

[Third Party Advisory] https://security.netapp.com/advisory/ntap-20230309-0004/

[Mailing List, Third Party Advisory] https://www.openwall.com/lists/oss-security/2022/11/30/1

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 3.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-401 CWE-281

Status published

Affected Products (8)

linux/linux_kernel < 5.4.226

linux/linux_kernel

Timeline

Published Jan 27, 2023

Tracked Since Feb 18, 2026