CVE - CVE-2022-48771

CVE-ID
CVE-2022-48771	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usercopy of the fence_rep object will lead to a stale entry in the file descriptor table as put_unused_fd() won't release it. This enables userland to refer to a dangling 'file' object through that still valid file descriptor, leading to all kinds of use-after-free exploitation scenarios. Fix this by deferring the call to fd_install() until after the usercopy has succeeded.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0008a0c78fc33a84e2212a7c04e6b21a36ca6f4d URL:https://git.kernel.org/stable/c/0008a0c78fc33a84e2212a7c04e6b21a36ca6f4d MISC:https://git.kernel.org/stable/c/1d833b27fb708d6fdf5de9f6b3a8be4bd4321565 URL:https://git.kernel.org/stable/c/1d833b27fb708d6fdf5de9f6b3a8be4bd4321565 MISC:https://git.kernel.org/stable/c/6066977961fc6f437bc064f628cf9b0e4571c56c URL:https://git.kernel.org/stable/c/6066977961fc6f437bc064f628cf9b0e4571c56c MISC:https://git.kernel.org/stable/c/84b1259fe36ae0915f3d6ddcea6377779de48b82 URL:https://git.kernel.org/stable/c/84b1259fe36ae0915f3d6ddcea6377779de48b82 MISC:https://git.kernel.org/stable/c/a0f90c8815706981c483a652a6aefca51a5e191c URL:https://git.kernel.org/stable/c/a0f90c8815706981c483a652a6aefca51a5e191c MISC:https://git.kernel.org/stable/c/ae2b20f27732fe92055d9e7b350abc5cdf3e2414 URL:https://git.kernel.org/stable/c/ae2b20f27732fe92055d9e7b350abc5cdf3e2414 MISC:https://git.kernel.org/stable/c/e8d092a62449dcfc73517ca43963d2b8f44d0516 URL:https://git.kernel.org/stable/c/e8d092a62449dcfc73517ca43963d2b8f44d0516
Assigning CNA
kernel.org
Date Record Created
20240620	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240620)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)