CVE-2022-50037
BaseFortify
Publication date: 2025-06-18
Last updated on: 2025-11-13
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
| linux | linux_kernel | 6.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves the drm/i915/ttm component where the kernel could leak the CCS (Color Control Surface) state from a previous user. Although the kernel manages the CCS state only with lmem-only objects, it failed to properly prevent leaking this state between users. The issue has been resolved by ensuring the kernel does not leak the CCS state from the previous user.
How can this vulnerability impact me? :
The vulnerability could potentially lead to information leakage between users on the system, where one user might gain access to the CCS state data of another user. This could result in unintended exposure of sensitive graphical or display-related information managed by the kernel's drm/i915 driver.