SECUFOCUSNOW
Home›CVE index›CVE-2022-49261
Review reviewHigh

CVE-2022-49261

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: add missing boundary check in vm_access A missing bounds check in vm_access() can lead to an out-of-bounds read or write in the adjacent memory area, since the len attribute is not validated before the memcpy later in the function, potentially hitting: [ 183.637831] BUG: unable to handle page fault for address: ffffc90000c86000 [ 183.637934] #PF: supervisor read access in kernel mode [ 183.637997] #PF: error_code(0x0000) - not-present page [ 183.638059] PGD 100000067 P4D 100000067 PUD 100258067 PMD 106341067 P...

CVSS
7.8
EPSS
0.29%
20.9% percentile
CISA KEV
Not listed
Published
2025.02.26
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.29%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: add missing boundary check in vm_access A missing bounds check in vm_access() can lead to an out-of-bounds read or write in the adjacent memory area, since the len attribute is not validated before the memcpy later in the function, potentially hitting: [ 183.637831] BUG: unable to handle page fault for address: ffffc90000c86000 [ 183.637934] #PF: supervisor read access in kernel mode [ 183.637997] #PF: error_code(0x0000) - not-present page [ 183.638059] PGD 100000067 P4D 100000067 PUD 100258067 PMD 106341067 P...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 9f909e215fea0652023b9ed09d3d7bfe10386423 < 89ddcc81914ab58cc203acc844f27d55ada8ec0e, >= 9f909e215fea0652023b9ed09d3d7bfe10386423 < 312d3d4f49e12f97260bcf972c848c3562126a18, >= 9f909e215fea0652023b9ed09d3d7bfe10386423 < 5f6e560e3e86ac053447524224e411034f41f5c7, >= 9f909e215fea0652023b9ed09d3d7bfe10386423 < 8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa, >= 9f909e215fea0652023b9ed09d3d7bfe10386423 < 3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7, >= 5.8, >= 5.8 < 5.10.110, >= 5.11 < 5.15.33, >= 5.16 < 5.16.19, >= 5.17 < 5.17.2
Fixed versions
5.10.110, 5.15.33, 5.16.19, 5.17.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-125, CWE-787