CVE-2022-49645

HIGH

Linux Kernel 5.4-5.18.13 Memory Corruption via Panfrost DRM Madvise IOCTL

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix shrinker list corruption by madvise IOCTL Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it.

References (5)

Core 5

Core References

Patch

https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0

Patch

https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240

Patch

https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1

Patch

https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4

Patch

https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912

Scores

CVSS v3 7.8

EPSS 0.0027

EPSS Percentile 18.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (18)

linux/Kernel 5.11.0 - 5.15.56linux

linux/Kernel 5.16.0 - 5.18.13linux

linux/Kernel 5.4.0 - 5.4.207linux

linux/Kernel 5.5.0 - 5.10.132linux

Linux/Linux < 5.4

Linux/Linux 013b6510131568ce4e01856d5360bfdfe9c3632f - 0581613df7f9a4c5fac096ce1d5fb15b7b994240

Linux/Linux 013b6510131568ce4e01856d5360bfdfe9c3632f - 1807d8867402a58b831a7fc16832747ff559a0d1

Linux/Linux 013b6510131568ce4e01856d5360bfdfe9c3632f - 393594aad55179eb761af41533d8d1d6eb4543b0

Linux/Linux 013b6510131568ce4e01856d5360bfdfe9c3632f - 9fc33eaaa979d112d10fea729edcd2a2e21aa912

Linux/Linux 013b6510131568ce4e01856d5360bfdfe9c3632f - f036392edd9c49090781d8cca26ad6557a63bae4

... and 8 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026