CVE-2022-49261

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: add missing boundary check in vm_access

A missing bounds check in vm_access() can lead to an out-of-bounds read

or write in the adjacent memory area, since the len attribute is not

validated before the memcpy later in the function, potentially hitting:

[ 183.637831] BUG: unable to handle page fault for address: ffffc90000c86000

[ 183.637934] #PF: supervisor read access in kernel mode

[ 183.637997] #PF: error_code(0x0000) - not-present page

[ 183.638059] PGD 100000067 P4D 100000067 PUD 100258067 PMD 106341067 PTE 0

[ 183.638144] Oops: 0000 [#2] PREEMPT SMP NOPTI

[ 183.638201] CPU: 3 PID: 1790 Comm: poc Tainted: G D 5.17.0-rc6-ci-drm-11296+ #1

[ 183.638298] Hardware name: Intel Corporation CoffeeLake Client Platform/CoffeeLake H DDR4 RVP, BIOS CNLSFWR1.R00.X208.B00.1905301319 05/30/2019

[ 183.638430] RIP: 0010:memcpy_erms+0x6/0x10

[ 183.640213] RSP: 0018:ffffc90001763d48 EFLAGS: 0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References