CVE-2022-4139

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-281 CWE-401

Affected software

Vendor	Product	Versions
n/a	kernel	kernel 6.1-rc7
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=2147572Issue Tracking, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230309-0004/Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/11/30/1Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2147572Issue Tracking, Patch, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230309-0004/Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/11/30/1Mailing List, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Jan 27, 2023
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-413909.8OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.CVE-2022-413919.8OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.CVE-2022-413925.4A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts or HTML via a crafte CVE-2022-413957.8Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in CVE-2022-413967.8Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setI CVE-2022-413979.8The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKe CVE-2022-413987.5The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr i CVE-2022-413997.5The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS_KEY") to encrypt and decryp CVE-2022-41407.5The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which cou CVE-2022-414009.8Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM CVE-2022-414016.5OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, po CVE-2022-414039.8OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=exte