CVE-2022-4139
Summary
| CVE | CVE-2022-4139 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-01-27 18:15:15 UTC |
| Updated | 2026-10-14 14:17:28 UTC |
| Description | An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system. |
Risk And Classification
Primary CVSS: v3.1 7.8 HIGH from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-281 | CWE-401 | CWE-281 CWE-281
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | ADP | DECLARED | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Na | Kernel | affected kernel 6.1-rc7 | Not specified |
| ADP | Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux Subsystem | affected V1.1 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - Security sensitive bug in the i915 kernel driver (CVE-2022-4139) | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| 2147572 – (CVE-2022-4139) CVE-2022-4139 kernel: i915: Incorrect GPU TLB flush can lead to random memory access | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking, Patch, Third Party Advisory |
| CVE-2022-4139 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | af854a3a-2127-422b-91ae-364da2661108 | security.netapp.com | Third Party Advisory |
| cert-portal.siemens.com/productcert/html/ssa-794697.html | 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e | cert-portal.siemens.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160392 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-0101)
- 160423 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-0334)
- 160457 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12121)
- 160459 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12116)
- 160460 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12120)
- 160462 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12119)
- 181371 Debian Security Update for linux (CVE-2022-4139)
- 181440 Debian Security Update for linux-5.10 (DLA 3244-1)
- 199156 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5859-1)
- 199209 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5912-1)
- 199211 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5911-1)
- 199212 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5917-1)
- 199220 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5929-1)
- 199223 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5935-1)
- 199224 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5934-1)
- 199226 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-5939-1)
- 199227 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5938-1)
- 199229 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5941-1)
- 199230 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5940-1)
- 199238 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5950-1)
- 199239 Ubuntu Security Notification for Linux kernel (IBM) Vulnerabilities (USN-5951-1)
- 199243 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-5962-1)
- 199276 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-6000-1)
- 199352 Ubuntu Security Notification for Linux kernel (OEM) Vulnerability (USN-6089-1)
- 199380 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6124-1)
- 241047 Red Hat Update for kpatch-patch (RHSA-2023:0123)
- 241049 Red Hat Update for kernel (RHSA-2023:0101)
- 241051 Red Hat Update for kernel-rt (RHSA-2023:0114)
- 241095 Red Hat Update for kernel (RHSA-2023:0334)
- 241096 Red Hat Update for kernel-rt (RHSA-2023:0300)
- 241101 Red Hat Update for kpatch-patch (RHSA-2023:0348)
- 241127 Red Hat Update for kpatch-patch (RHSA-2023:0441)
- 241128 Red Hat Update for kernel (RHSA-2023:0440)
- 241144 Red Hat Update for kpatch-patch (RHSA-2023:0499)
- 241147 Red Hat Update for kernel (RHSA-2023:0496)
- 241149 Red Hat Update for kernel (RHSA-2023:0512)
- 241150 Red Hat Update for kernel-rt (RHSA-2023:0531)
- 241151 Red Hat Update for kpatch-patch (RHSA-2023:0536)
- 241152 Red Hat Update for kernel-rt (RHSA-2023:0526)
- 283382 Fedora Security Update for kernel (FEDORA-2022-24041b1667)
- 283383 Fedora Security Update for kernel (FEDORA-2022-b36cd53dca)
- 283390 Fedora Security Update for kernel (FEDORA-2022-e4460c41bc)
- 355199 Amazon Linux Security Advisory for kernel : ALAS2023-2023-070
- 378468 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-20230042)
- 378512 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0042)
- 753015 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 23 for SLE 15 SP3) (SUSE-SU-2022:4544-1)
- 753016 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 24 for SLE 15 SP2) (SUSE-SU-2022:4587-1)
- 753017 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 4 for SLE 15 SP4) (SUSE-SU-2022:4560-1)
- 753020 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4585-1)
- 753021 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 14 for SLE 15 SP3) (SUSE-SU-2022:4528-1)
- 753022 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 20 for SLE 15 SP3) (SUSE-SU-2022:4551-1)
- 753023 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 5 for SLE 15 SP4) (SUSE-SU-2022:4542-1)
- 753029 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 25 for SLE 15 SP3) (SUSE-SU-2022:4517-1)
- 753031 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 31 for SLE 15 SP2) (SUSE-SU-2022:4515-1)
- 753032 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 27 for SLE 15 SP2) (SUSE-SU-2022:4513-1)
- 753033 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP4) (SUSE-SU-2022:4518-1)
- 753034 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4504-1)
- 753035 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 30 for SLE 15 SP2) (SUSE-SU-2022:4534-1)
- 753037 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 26 for SLE 15 SP2) (SUSE-SU-2022:4580-1)
- 753040 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 12 for SLE 15 SP3) (SUSE-SU-2022:4562-1)
- 753041 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 24 for SLE 15 SP3) (SUSE-SU-2022:4516-1)
- 753043 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 26 for SLE 15 SP3) (SUSE-SU-2022:4572-1)
- 753044 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 3 for SLE 15 SP4) (SUSE-SU-2022:4559-1)
- 753045 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4503-1)
- 753048 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 18 for SLE 15 SP3) (SUSE-SU-2022:4569-1)
- 753050 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 22 for SLE 15 SP3) (SUSE-SU-2022:4543-1)
- 753051 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4589-1)
- 753061 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4616-1)
- 753062 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4613-1)
- 753063 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:4617-1)
- 905399 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13243)
- 905401 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13247)
- 905963 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13243-2)
- 906306 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13247-2)
- 906573 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13243-4)
- 906612 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (13247-4)
- 940879 AlmaLinux Security Update for kernel (ALSA-2023:0101)
- 940881 AlmaLinux Security Update for kernel-rt (ALSA-2023:0114)
- 940904 AlmaLinux Security Update for kernel (ALSA-2023:0334)
- 940910 AlmaLinux Security Update for kernel-rt (ALSA-2023:0300)
- 960498 Rocky Linux Security Update for kernel (RLSA-2023:0101)
- 960503 Rocky Linux Security Update for kernel-rt (RLSA-2023:0300)
- 960509 Rocky Linux Security Update for kernel-rt (RLSA-2023:0114)
- 960587 Rocky Linux Security Update for kernel (RLSA-2023:0334)