Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49359

drm/panfrost: Job should reference MMU not file_priv

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Job should reference MMU not file_priv For a while now it's been allowed for a MMU context to outlive it's corresponding panfrost_priv, however the job structure still references panfrost_priv to get hold of the MMU context. If panfrost_priv has been freed this is a use-after-free which I've been able to trigger resulting in a splat. To fix this, drop the reference to panfrost_priv in the job structure and add a direct reference to the MMU structure which is what's actually needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7fdc48cc63a30fa3480d18bdd8c5fff2b9b15212 to < 8c8e8cc91a6ffc79865108279a74fd57d9070a17affected
  • 7fdc48cc63a30fa3480d18bdd8c5fff2b9b15212 to < 472dd7ea5e19a1aeabf1711ddc756777e05ee7c2affected
  • 7fdc48cc63a30fa3480d18bdd8c5fff2b9b15212 to < 6e516faf04317db2c46cbec4e3b78b4653a5b109affected
  • c29485e34e63198dca6289639aa711f99d88e76eaffected
  • 626adede2642f00c8918999a2451bd0a644ab9b7affected
  • cf461fa9250a634e8afc4433d82ae0decea8136eaffected
  • 5.10.67 to < 5.11affected
  • 5.13.19 to < 5.14affected
  • 5.14.6 to < 5.15affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.17.15 to ≤ 5.17.*unaffected
  • 5.18.4 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References