
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-49261 affects the Linux kernel's drm/i915/gem component, specifically related to a missing boundary check in the vm_access function. The vulnerability was discovered in early 2022 and affects the Intel i915 graphics driver. The issue was resolved through a patch that added proper boundary validation (Kernel Commit).
The vulnerability stems from a missing bounds check in the vm_access() function where the len attribute is not properly validated before a memcpy operation. This oversight can lead to an out-of-bounds read or write in adjacent memory areas. The issue manifests as a page fault error when attempting to access memory outside the allocated bounds, triggering a kernel oops with supervisor read access in kernel mode (NVD).
When exploited, this vulnerability can cause an out-of-bounds read or write in adjacent memory areas, potentially leading to system crashes or memory corruption. The issue affects systems running the Intel i915 graphics driver and could result in denial of service conditions (NVD).
The issue has been fixed by implementing a proper boundary check using the rangeoverflowst function to validate the address and length parameters before performing memory operations. The fix was committed to the Linux kernel and is available through the appropriate kernel updates (Kernel Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."