PT-2024-11815 · Linux+5 · Linux Kernel+5

Published 2022-09-15 · Updated 2026-05-26 · CVE-2022-48893

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue occurs during the driver initialization process in the Linux kernel, specifically in the drm/i915/gt module, where some engines may be fully set up while others are not, leading to a leak of common objects allocated when 'engine->release == NULL'. This happens when driver initialization is aborted in the middle of gt/engine discovery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-459

Related Identifiers

AZL-49032

BDU:2025-14263

CVE-2022-48893

DLA-4178-1

OESA-2024-2255

OESA-2024-2257

OESA-2024-2258

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3483-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3483-1

USN-7654-1

USN-7654-2

USN-7654-3

USN-7654-4

USN-7654-5

USN-7655-1

USN-7686-1

USN-7711-1

USN-7712-1

USN-7712-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1019

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48893.json · Exploit
• https://ubuntu.com/security/CVE-2024-38541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44954 · Security Note
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35867 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4178-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38613 · Security Note
• https://osv.dev/vulnerability/USN-7655-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22010 · Vendor Advisory