PT-2025-25889 · Linux+2 · Linux Kernel+2

Publicado 2022-08-23 · Atualizado 2025-07-15 · CVE-2022-49963

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the handling of CCS in the Linux kernel, specifically in the drm/i915/ttm component. It appears that the migrate copy() function has problems with large objects, including integer overflows and improper page copying for objects larger than 8M. This can lead to a GEM BUG ON error when the number of CCS blocks exceeds the allowed limit. The issue can be triggered with certain tests, such as gem lmem swapping, when using larger object sizes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Integer Overflow

Enumeração de Fraquezas

CWE-787

CWE-190

Identificadores relacionados

BDU:2026-04898

CVE-2022-49963

SUSE-SU-2025:02264-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

Produtos afetados

Astra Linux

Linux Kernel

Suse

Referências · 577

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49963.json · Exploit
• https://bugzilla.suse.com/1244825 · Nota
• https://bugzilla.suse.com/1245064 · Nota
• https://git.kernel.org/stable/c/97434cb55bd884bd268626ec41489f79b261b2d4 · Correção
• https://bugzilla.suse.com/1244793 · Nota
• https://bugzilla.suse.com/1245180 · Nota
• https://bugzilla.suse.com/1244849 · Nota
• https://bugzilla.suse.com/1245072 · Nota
• https://bugzilla.suse.com/1244180 · Nota
• https://bugzilla.suse.com/1244965 · Nota
• https://suse.com/security/cve/CVE-2022-49982 · Nota
• https://bugzilla.suse.com/1244337 · Nota
• https://bugzilla.suse.com/1236822 · Nota
• https://suse.com/security/cve/CVE-2022-50044 · Nota
• https://suse.com/security/cve/CVE-2022-49942 · Nota