Executive Summary

Informations
Name CVE-2022-49359 First vendor Publication 2025-02-26
Vendor Cve Last vendor Modification 2025-03-25

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

drm/panfrost: Job should reference MMU not file_priv

For a while now it's been allowed for a MMU context to outlive it's corresponding panfrost_priv, however the job structure still references panfrost_priv to get hold of the MMU context. If panfrost_priv has been freed this is a use-after-free which I've been able to trigger resulting in a splat.

To fix this, drop the reference to panfrost_priv in the job structure and add a direct reference to the MMU structure which is what's actually needed.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49359

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3540

Sources (Detail)

https://git.kernel.org/stable/c/472dd7ea5e19a1aeabf1711ddc756777e05ee7c2
https://git.kernel.org/stable/c/6e516faf04317db2c46cbec4e3b78b4653a5b109
https://git.kernel.org/stable/c/8c8e8cc91a6ffc79865108279a74fd57d9070a17
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2025-06-26 02:09:35
  • Multiple Updates
2025-06-25 12:22:26
  • Multiple Updates
2025-06-24 02:14:11
  • Multiple Updates
2025-05-27 02:10:23
  • Multiple Updates
2025-03-28 17:21:01
  • Multiple Updates
2025-03-28 13:34:54
  • Multiple Updates
2025-03-28 02:57:00
  • Multiple Updates
2025-03-25 17:21:20
  • Multiple Updates
2025-02-28 00:20:34
  • Multiple Updates
2025-02-26 17:20:32
  • First insertion