CVE-2022-48849

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48849

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case (v2) vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when virtual display is enabled. This can fix below calltrace: amdgpu 0000:00:08.0: GFX9+ requires FB check based on format modifier WARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu] v2: check adev->enable_virtual_display instead as vkms can be enabled in bare metal as well.

References
Link Resource
https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 Patch
https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 Patch
https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 Patch
https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 Patch
https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:34

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 - Patch () https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 - Patch
References () https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 - Patch () https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 - Patch
References () https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699 - Patch () https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699 - Patch

23 Jul 2024, 17:09

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: omite la verificación del indicador de mosaico en la vitrina virtual (v2) vkms aprovecha la creación de framebuffer amdgpu común y, además, como no admite el modificador FB, no es necesario verificar los indicadores de mosaico al iniciar framebuffer cuando la visualización virtual está habilitada. Esto se puede solucionar a continuación: amdgpu 0000:00:08.0: GFX9+ requiere verificación de FB según el modificador de formato ADVERTENCIA: CPU: 0 PID: 1023 en drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu] v2: marque adev->enable_virtual_display en su lugar, ya que vkms también se puede habilitar en bare metal.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 - () https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2 - Patch
References () https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 - () https://git.kernel.org/stable/c/e2b993302f40c4eb714ecf896dd9e1c5be7d4cd7 - Patch
References () https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699 - () https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

16 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-16 13:15

Updated : 2025-06-19 13:15

NVD link : CVE-2022-48849

Mitre link : CVE-2022-48849

CVE.ORG link : CVE-2022-48849

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo