PT-2022-6121 · Linux+9 · Linux Kernel+9

Andrzej Hajda · Published 2022-11-30 · Updated 2025-03-28 · CVE-2022-4139

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description An issue with the Linux kernel's GPU i915 kernel driver was found, related to an incorrect Translation Lookaside Buffer (TLB) flush. This could lead to random memory corruption or data leaks, potentially allowing a local user to crash the system or escalate their privileges. The issue affects integrated and discrete GPU Intel 12th generation, including Tiger Lake, Rocket Lake, Alder Lake, DG1, Raptor Lake, DG2, Arctic Sound, and Meteor Lake, starting from Linux kernel 5.4.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Memory Leak

Weakness Enumeration

CWE-281

CWE-401

Related Identifiers

ALSA-2023:0101

ALSA-2023:0114

ALSA-2023:0300

ALSA-2023:0334

ALT-PU-2022-3272

ALT-PU-2022-3273

ALT-PU-2022-3284

ALT-PU-2022-3285

ALT-PU-2022-3303

ALT-PU-2022-3310

ALT-PU-2022-3311

ALT-PU-2022-3338

ALT-PU-2022-3364

ALT-PU-2022-3371

ALT-PU-2023-1044

ALT-PU-2023-1066

ALT-PU-2023-1068

ALT-PU-2023-1378

ALT-PU-2023-4894

ALT-PU-2023-7007

ALT-PU-2023-7682

AZL-13247

BDU:2023-00061

CESA-2023_0101

CESA-2023_0114

CESA-2023_0123

CVE-2022-4139

DLA-3244-1

MGASA-2022-0477

MGASA-2022-0478

OESA-2022-2130

OPENSUSE-SU-2022_4503-1

OPENSUSE-SU-2022_4504-1

OPENSUSE-SU-2022_4585-1

OPENSUSE-SU-2022_4613-1

OPENSUSE-SU-2022_4616-1

OPENSUSE-SU-2022_4617-1

RHSA-2023:0101

RHSA-2023:0114

RHSA-2023:0123

RHSA-2023:0300

RHSA-2023:0334

RHSA-2023:0348

RHSA-2023:0440

RHSA-2023:0441

RHSA-2023:0496

RHSA-2023:0499

RHSA-2023:0512

RHSA-2023:0526

RHSA-2023:0531

RHSA-2023:0536

RHSA-2023:0859

RHSA-2023_0101

RHSA-2023_0114

RHSA-2023_0300

RHSA-2023_0334

RLSA-2023:0101

RLSA-2023:0114

RLSA-2023:0300

RLSA-2023:0334

RXSA-2023:0101

RXSA-2023:0334

SUSE-SU-2022:4503-1

SUSE-SU-2022:4504-1

SUSE-SU-2022:4513-1

SUSE-SU-2022:4515-1

SUSE-SU-2022:4516-1

SUSE-SU-2022:4517-1

SUSE-SU-2022:4518-1

SUSE-SU-2022:4528-1

SUSE-SU-2022:4534-1

SUSE-SU-2022:4542-1

SUSE-SU-2022:4543-1

SUSE-SU-2022:4544-1

SUSE-SU-2022:4551-1

SUSE-SU-2022:4559-1

SUSE-SU-2022:4560-1

SUSE-SU-2022:4562-1

SUSE-SU-2022:4569-1

SUSE-SU-2022:4572-1

SUSE-SU-2022:4580-1

SUSE-SU-2022:4585-1

SUSE-SU-2022:4587-1

SUSE-SU-2022:4589-1

SUSE-SU-2022:4613-1

SUSE-SU-2022:4614-1

SUSE-SU-2022:4616-1

SUSE-SU-2022:4617-1

SUSE-SU-2022_4572-1

USN-5859-1

USN-5911-1

USN-5912-1

USN-5917-1

USN-5929-1

USN-5934-1

USN-5935-1

USN-5938-1

USN-5939-1

USN-5940-1

USN-5941-1

USN-5950-1

USN-5951-1

USN-5962-1

USN-6000-1

USN-6089-1

USN-6124-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 681

• https://linux.oracle.com/errata/ELSA-2023-0334.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5962-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3344 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4503-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5917-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12116.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5941-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47518 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4559-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5929-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2023:0114 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4569-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5951-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47929 · Vendor Advisory