Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.9
CVE-2022-49359: Linux kernel graphics driver may cause system crash
CVE-2022-49359 · published 1 year ago
Summary
The graphics driver in several Linux kernel versions (including Ubuntu HWE Edge, AWS 5.0 and 5.3, and Azure 5.3) can reference memory that has already been released, leading to a possible crash or instability. This happens when a job continues to use an old graphics context after it has been freed. Updating to the latest kernel packages from your distribution will apply the fix and stop the issue.
What to do
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 5.10.251-1.root.io.73.
- Update debian rootio-linux to version 5.10.251-3.root.io.75.
- Update canonical linux to version 5.15.0-187.197.aikido.111.
- Update canonical rootio-linux to version 5.15.0-187.197.aikido.111.
- Update linux kernel to version 5.18.4.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update debian linux to version 5.18.5-1.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update canonical linux-aws-5.15 to version 5.15.0-1119.126~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1125.134~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1124.133~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1120.130~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-202.212~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1113.117~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-197.207~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1070.72~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1116.122~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1113.117~20.04.2.
- Update canonical linux to version 5.15.0-202.212.
- Update canonical linux-aws to version 5.15.0-1119.126.
- Update canonical linux-azure to version 5.15.0-1125.134.
- Update canonical linux-azure-fde to version 5.15.0-1124.133.
- Update canonical linux-gcp to version 5.15.0-1120.130.
- Update canonical linux-gke to version 5.15.0-1115.121.
- Update canonical linux-gkeop to version 5.15.0-1102.110.
- Update canonical linux-ibm to version 5.15.0-1113.117.
- Update canonical linux-intel-iotg to version 5.15.0-1114.120.
- Update canonical linux-kvm to version 5.15.0-1111.116.
- Update canonical linux-lowlatency to version 5.15.0-197.207.
- Update canonical linux-nvidia to version 5.15.0-1114.115.
- Update canonical linux-nvidia-tegra to version 5.15.0-1070.72.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1059.59.
- Update canonical linux-oracle to version 5.15.0-1116.122.
- Update canonical linux-bluefield to version 5.15.0-1103.105.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1111.115.
- Update canonical linux-realtime to version 5.15.0-1118.127.
- Update canonical linux-aws-fips to version 5.15.0-1119.126+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1125.134+fips1.
- Update canonical linux-fips to version 5.15.0-202.212+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1120.130+fips1.
- Update linux linux to version 8c8e8cc91a6ffc79865108279a74fd57d9070a17 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| – | linux | linux |
< 8c8e8cc91a6ffc79865108279a74fd57d9070a17 5.15 |
| – | linux | linux_kernel |
>= 5.10.67, < 5.11 >= 5.13.19, < 5.14 >= 5.14.6, < 5.17.15 >= 5.18, < 5.18.4 5.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1119.126~20.04.1 Fix: upgrade to 5.15.0-1119.126~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1125.134~20.04.1 Fix: upgrade to 5.15.0-1125.134~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1120.130~20.04.1 Fix: upgrade to 5.15.0-1120.130~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-202.212~20.04.1 Fix: upgrade to 5.15.0-202.212~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1113.117~20.04.1 Fix: upgrade to 5.15.0-1113.117~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-197.207~20.04.1 Fix: upgrade to 5.15.0-197.207~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1070.72~20.04.1 Fix: upgrade to 5.15.0-1070.72~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 127. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1116.122~20.04.1 Fix: upgrade to 5.15.0-1116.122~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1113.117~20.04.2 Fix: upgrade to 5.15.0-1113.117~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-202.212 Fix: upgrade to 5.15.0-202.212
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1119.126 Fix: upgrade to 5.15.0-1119.126
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1125.134 Fix: upgrade to 5.15.0-1125.134
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1124.133 Fix: upgrade to 5.15.0-1124.133
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1120.130 Fix: upgrade to 5.15.0-1120.130
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1115.121 Fix: upgrade to 5.15.0-1115.121
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1102.110 Fix: upgrade to 5.15.0-1102.110
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1113.117 Fix: upgrade to 5.15.0-1113.117
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1111.116 Fix: upgrade to 5.15.0-1111.116
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-197.207 Fix: upgrade to 5.15.0-197.207
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1114.115 Fix: upgrade to 5.15.0-1114.115
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1070.72 Fix: upgrade to 5.15.0-1070.72
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1059.59 Fix: upgrade to 5.15.0-1059.59
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1116.122 Fix: upgrade to 5.15.0-1116.122
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1103.105 Fix: upgrade to 5.15.0-1103.105
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1119.126+fips1 Fix: upgrade to 5.15.0-1119.126+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1125.134+fips1 Fix: upgrade to 5.15.0-1125.134+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-202.212+fips1 Fix: upgrade to 5.15.0-202.212+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1120.130+fips1 Fix: upgrade to 5.15.0-1120.130+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1118.127 Fix: upgrade to 5.15.0-1118.127
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 < 5.10.251-1.root.io.73 < 5.10.251-3.root.io.75 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Ubuntu:22.04 | canonical | linux |
< 5.15.0-187.197.aikido.111 Fix: upgrade to 5.15.0-187.197.aikido.111
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-187.197.aikido.111 Fix: upgrade to 5.15.0-187.197.aikido.111
|
| Linux | linux | kernel |
>= 5.18.0, < 5.18.4 Fix: upgrade to 5.18.4
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1124.133~20.04.1 Fix: upgrade to 5.15.0-1124.133~20.04.1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Debian:12 | debian | linux |
< 5.18.5-1 Fix: upgrade to 5.18.5-1
|
Original advisory text
CVE-2022-49359 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Job should reference MMU not file_priv For a while now it's been allowed for a MMU context to outlive it's corresponding panfrost_priv, however the job structure still references panfrost_priv to get hold of the MMU context. If panfrost_priv has been freed this is a use-after-free which I've been able to trigger resulting in a splat. To fix this, drop the reference to panfrost_priv in the job structure and add a direct reference to the MMU structure which is what's actually needed.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49359... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49359 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2022-49359 Vendor Advisory
- https://ubuntu.com/security/CVE-2022-49359 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-49359 Third Party Advisory
- https://git.kernel.org/linus/6e516faf04317db2c46cbec4e3b78b4653a5b109 Third Party Advisory
- https://git.kernel.org/stable/c/472dd7ea5e19a1aeabf1711ddc756777e05ee7c2 Third Party Advisory
- https://git.kernel.org/stable/c/6e516faf04317db2c46cbec4e3b78b4653a5b109 Third Party Advisory
- https://git.kernel.org/stable/c/8c8e8cc91a6ffc79865108279a74fd57d9070a17 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8962-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8961-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8963-1 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.9
High
Type
CWE-416Use After Free
Timeline
Published26 Feb 2025
Updated3 Nov 2026
First seen6 Mar 2026
Sources
UBUNTU-CVE-2022-49359 · OSV
CVE-2022-49359 · OSV
CVE-2022-49359 · MITRE
CVE-2022-49359 · NVD
DEBIAN-CVE-2022-49359 · OSV
Track software like this
Free during beta