PT-2024-11768 · Linux+2 · Linux Kernel+2

Published 2022-09-09 · Updated 2026-05-26 · CVE-2022-48633

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc3+

Description The issue arises from the psb gem unpin() function calling dma resv lock() while the underlying ww mutex is destroyed by drm gem object release(). To fix this, the drm gem object release() call in psb gem free object() is moved to after the unpin, resolving the warning. The warning is triggered when the lock->magic does not match the expected value, indicating a potential locking issue.

Recommendations To resolve this issue, update the Linux kernel to a version newer than 6.0.0-rc3+. As a temporary workaround, consider disabling the psb gem unpin() function until a patch is available. However, this may have unintended consequences and should be approached with caution. Always prioritize updating to a patched version of the kernel for a permanent fix.

Exploit

Fix

Improper Resource Release

Assertion Failure

Weakness Enumeration

CWE-404

CWE-617

Related Identifiers

BDU:2025-15323

CVE-2022-48633

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2190-1

Affected Products

Debian

Linux Kernel

Suse

References · 1185

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48633.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-48633 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48633 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-48633 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48633 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48633 · Vendor Advisory
• https://git.kernel.org/stable/c/55c077d97fa67e9f19952bb24122a8316b089474 · Patch
• https://git.kernel.org/stable/c/b6f25c3b94f2aadbf5cbef954db4073614943d74 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-48633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48633 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2008-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2019-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15323 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-48633 · Security Note