CVE-2022-48893
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not.
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have 'engine->release == NULL' and so will leak any of the common objects allocated. v2: - Drop the destroy_pinned_context() helper for now. It's not really worth it with just a single callsite at the moment. (Janusz)
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.26% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-459
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/5c855bcc730656c4b7d30aaddcd0eafc7003e112Patch
- https://git.kernel.org/stable/c/78350c36fb15afef423404a83dcbc5c558dce795
- https://git.kernel.org/stable/c/78a033433a5ae4fee85511ee075bc9a48312c79ePatch
- https://git.kernel.org/stable/c/7d21587d35bc816c85a51b8686f0f7e8e676fb14
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.