vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-50842

drm/virtio: Check whether transferred 2D BO is shmem

N/A
Published: December 30, 2025 at 12:11 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.7 ≤ v < 5.10.1505.7 ≤ v < 5.15.755.7 ≤ v < 5.19.175.7 ≤ v < 6.0.35.7 ≤ v < 6.15.7f651c8b055423057d9f41525dfdc37b4796015d1
Vendor states this is fixed in 36e133af33ea54193378b190cf92c47c12a43d34 (fixed)
Vendor states this is fixed in 989164305b933af06d69bb91044dafbd01025371 (fixed)
Vendor states this is fixed in e473216b42aa1fd9fc6b94b608b42c210c655908 (fixed)
Vendor states this is fixed in f122bcb34f1a4b02ef3d95058d8fd1316ea03785 (fixed)
Vendor states this is fixed in f134f261d76ae3d5ecf68db642eaa746ceb84cfb (fixed)
Vendor states this is fixed in 5.10.150 (unaffected)
Vendor states this is fixed in 5.15.75 (unaffected)
Vendor states this is fixed in 5.19.17 (unaffected)
Vendor states this is fixed in 5.7 (unaffected)
Vendor states this is fixed in 6.0.3 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/f134f261d76ae3d5ecf68db642eaa746ceb84cfb
Source: cverecord
https://git.kernel.org/stable/c/f122bcb34f1a4b02ef3d95058d8fd1316ea03785
Source: cverecord
https://git.kernel.org/stable/c/989164305b933af06d69bb91044dafbd01025371
Source: cverecord
https://git.kernel.org/stable/c/36e133af33ea54193378b190cf92c47c12a43d34
Source: cverecord
https://git.kernel.org/stable/c/e473216b42aa1fd9fc6b94b608b42c210c655908

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card