CVE - CVE-2022-48899

CVE-ID
CVE-2022-48899	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done after we are done dereferencing the object.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/011ecdbcd520c90c344b872ca6b4821f7783b2f8 URL:https://git.kernel.org/stable/c/011ecdbcd520c90c344b872ca6b4821f7783b2f8 MISC:https://git.kernel.org/stable/c/19ec87d06acfab2313ee82b2a689bf0c154e57ea URL:https://git.kernel.org/stable/c/19ec87d06acfab2313ee82b2a689bf0c154e57ea MISC:https://git.kernel.org/stable/c/52531258318ed59a2dc5a43df2eaf0eb1d65438e URL:https://git.kernel.org/stable/c/52531258318ed59a2dc5a43df2eaf0eb1d65438e MISC:https://git.kernel.org/stable/c/68bcd063857075d2f9edfed6024387ac377923e2 URL:https://git.kernel.org/stable/c/68bcd063857075d2f9edfed6024387ac377923e2 MISC:https://git.kernel.org/stable/c/adc48e5e408afbb01d261bd303fd9fbbbaa3e317 URL:https://git.kernel.org/stable/c/adc48e5e408afbb01d261bd303fd9fbbbaa3e317 MISC:https://git.kernel.org/stable/c/d01d6d2b06c0d8390adf8f3ba08aa60b5642ef73 URL:https://git.kernel.org/stable/c/d01d6d2b06c0d8390adf8f3ba08aa60b5642ef73
Assigning CNA
kernel.org
Date Record Created
20240821	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240821)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)