CVE-2022-49645
kernel: drm/panfrost: Fix shrinker list corruption by madvise IOCTL
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · February 26, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/panfrost: Fix shrinker list corruption by madvise IOCTL
Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it.
Statement
This vulnerability presents a local denial-of-service risk capable of triggering a kernel crash, but it does not affect supported Red Hat Enterprise Linux releases because the vulnerable driver code is not present. The issue resides in the Panfrost graphics driver for ARM Mali GPUs, which is intended for specific embedded and desktop graphical hardware rather than typical enterprise server environments. Exploitation would require an attacker to have local privileges and access to compatible Mali hardware to invoke the relevant GPU device control operations.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified