CVE-2022-1419: Use After Free
Last updated 25 April 2025
Other sources
The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject (created in vgemgemdumbcreate) concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1419?
CVE-2022-1419 has been classified with a medium severity due to potential impacts on system stability and memory safety.
How do I fix CVE-2022-1419?
To remediate CVE-2022-1419, update the affected kernel packages to the recommended versions provided by Red Hat or Debian.
What systems are affected by CVE-2022-1419?
CVE-2022-1419 affects various Linux kernel versions, specifically those below 5.6 and certain versions of Debian and Red Hat kernels.
What kind of vulnerability is CVE-2022-1419?
CVE-2022-1419 is a memory safety vulnerability that arises from concurrent access issues to DRM objects in the Linux kernel.
Is there any known exploit for CVE-2022-1419?
Currently, there are no publicly disclosed exploits specifically targeting CVE-2022-1419, but it is considered a potential risk for attackers.