What is CVE-2022-48849?

CVE-2022-48849 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-07-16.

How severe is CVE-2022-48849?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2022-48849 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux

CVE-2022-48849

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case (v2) vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when virtual display is enabled. This can fix below calltrace: amdgpu 0000:00:08.0: GFX9+ requires FB check based on format modifier WARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu] v2: check adev->enable_virtual_display instead as vkms can be enabled in bare metal as well.

EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Linux — versions 2f350ddadca3b96c72ed1481875f0b8fc1a01612, 5.16, 0
Linux Linux_kernel

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
af854a3a-2127-422b-91ae-364da2661108 (Patch)

Frequently asked questions

What is CVE-2022-48849?: CVE-2022-48849 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-07-16.
How severe is CVE-2022-48849?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2022-48849 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.