CVE-2022-48849

published 2024-07-16

CVE-2022-48849: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case (v2) vkms leverages common…

Priority P4 22 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I H A N

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: bypass tiling flag check in virtual display case (v2)

vkms leverages common amdgpu framebuffer creation, and
also as it does not support FB modifier, there is no need
to check tiling flags when initing framebuffer when virtual
display is enabled.

This can fix below calltrace:

amdgpu 0000:00:08.0: GFX9+ requires FB check based on format modifier
WARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu]

v2: check adev->enable_virtual_display instead as vkms can be
enabled in bare metal as well.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.16.18-1 (bookworm)	linux 5.16.18-1 (bookworm)
linux	linux	—	—
linux	linux	>= 2f350ddadca3b96c72ed1481875f0b8fc1a01612 < cb29021be49858059138f75d6311a7c35a9379b2	cb29021be49858059138f75d6311a7c35a9379b2
linux	linux	>= 2f350ddadca3b96c72ed1481875f0b8fc1a01612 < e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7	e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7
linux	linux_kernel	< 5.15.29	5.15.29
linux	linux_kernel	>= 0 < 5.16.18-1	5.16.18-1
linux	linux_kernel	>= 0 < 5.16.18-1	5.16.18-1
linux	linux_kernel	>= 0 < 5.16.18-1	5.16.18-1
linux	linux_kernel	>= 5.16 < 5.16.15	5.16.15

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.