CVE-2022-49935

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the dma-buf/dma-resv component, where a check was added to ensure that a new fence is really later than existing fences. Previously, it was assumed that a new fence was always newer than all existing fences. However, with the addition of an UAPI to explicit export/import, this assumption is no longer valid. Without this check, userspace could force the kernel into a use after free error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.