CVE-2022-4139

CVE Details

Release Date:	2023-01-27
Impact:	None	What is this?

Description

An incorrect TLB flush issue was found in the Linux kernel's GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

See more information about CVE-2022-4139 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	7.8
Vector String:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version:	3.0
Attack Vector:	Local
Attack Complexity:	Low
Privileges Required:	Low
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	High
Integrity Impact:	High
Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 7 (kernel-uek)	ELSA-2023-12119	2023-02-14
Oracle Linux version 7 (kernel-uek-container)	ELSA-2023-12121	2023-02-14
Oracle Linux version 8 (kernel)	ELSA-2023-0101	2023-01-13
Oracle Linux version 8 (kernel-uek)	ELSA-2023-12116	2023-02-13
Oracle Linux version 8 (kernel-uek)	ELSA-2023-12119	2023-02-14
Oracle Linux version 8 (kernel-uek)	ELSA-2023-12120	2023-02-13
Oracle Linux version 8 (kernel-uek-container)	ELSA-2023-12121	2023-02-14
Oracle Linux version 9 (kernel)	ELSA-2023-0334	2023-01-25
Oracle Linux version 9 (kernel-uek)	ELSA-2023-12116	2023-02-13