Vulnerability · Published Jan 27, 2023 · Assigned by redhat

CVE-2022-4139

High 7.8

In plain English

A high-severity security flaw in kernel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 82.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9bpftool5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-abi-stablelists4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-abi-stablelists5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-core4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-core5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-cross-headers4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-cross-headers5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-debug4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-debug5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-debug-core4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-debug-core5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-debug-devel4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-debug-devel5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:9kernel-debug-devel-matched5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-debug-modules4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-debug-modules5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-debug-modules-extra4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-debug-modules-extra5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-devel4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-devel5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:9kernel-devel-matched5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-doc4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-doc5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-modules4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-modules5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-modules-extra4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-modules-extra5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-rt4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-core4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-core5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug-core4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug-core5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug-devel4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug-devel5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug-kvm4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug-kvm5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug-modules4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug-modules5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-devel4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-devel5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-kvm4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-kvm5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-modules4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-modules5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-rt-modules-extra4.18.0-425.10.1.rt7.220.el8_7ALSA-2023:0114
AlmaLinux:9kernel-rt-modules-extra5.14.0-162.12.1.rt21.175.el9_1ALSA-2023:0300
AlmaLinux:8kernel-tools4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-tools5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-tools-libs4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-tools-libs5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-tools-libs-devel4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-tools-libs-devel5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-zfcpdump4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-zfcpdump5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-zfcpdump-core4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-zfcpdump-core5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-zfcpdump-devel4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-zfcpdump-devel5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-zfcpdump-modules4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-zfcpdump-modules5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8perf4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9perf5.14.0-162.12.1.el9_1ALSA-2023:0334
AlmaLinux:8python3-perf4.18.0-425.10.1.el8_7ALSA-2023:0101
AlmaLinux:9python3-perf5.14.0-162.12.1.el9_1ALSA-2023:0334
Debian:12linux6.0.10-2DEBIAN-CVE-2022-4139
Debian:13linux6.0.10-2DEBIAN-CVE-2022-4139
Debian:14linux6.0.10-2DEBIAN-CVE-2022-4139
Rocky Linux:8kernel0:4.18.0-425.10.1.el8_7.cloudRXSA-2023:0101
Rocky Linux:8kernel0:4.18.0-425.10.1.el8_7RLSA-2023:0101
Rocky Linux:9kernel0:5.14.0-162.12.1.el9_1.0.2RLSA-2023:0334
Rocky Linux:9kernel0:5.14.0-162.12.1.el9_1.cloud.0.1RXSA-2023:0334
Rocky Linux:8kernel-rt0:4.18.0-425.10.1.rt7.220.el8_7RLSA-2023:0114
Rocky Linux:9kernel-rt0:5.14.0-162.12.1.rt21.175.el9_1RLSA-2023:0300
Ubuntu:22.04:LTSlinux5.15.0-67.74USN-5912-1
Ubuntu:22.04:LTSlinux5.15.0-67.74UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-aws5.15.0-1031.35USN-5912-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1031.35UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-azure5.15.0-1034.41UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-azure5.15.0-1034.41USN-5912-1
Ubuntu:22.04:LTSlinux-azure-5.195.19.0-1021.22~22.04.1UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1034.41.1UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1034.41.1USN-5912-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1030.37USN-5912-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1030.37UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-gke5.15.0-1028.33USN-5912-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1028.33UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1016.21USN-5938-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1016.21UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-hwe-5.195.19.0-35.36~22.04.1USN-5911-1
Ubuntu:22.04:LTSlinux-hwe-5.195.19.0-35.36~22.04.1UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-ibm5.15.0-1026.29USN-5935-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1026.29UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1026.31UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1026.31USN-5962-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1029.34UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-kvm5.15.0-1029.34USN-5941-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-67.74UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-67.74USN-5912-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.195.19.0-1018.19~22.04.1UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1023.23UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-oem-5.175.17.0-1032.33USN-6124-1
Ubuntu:22.04:LTSlinux-oem-5.175.17.0-1032.33UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-oem-6.06.0.0-1016.16USN-6089-1
Ubuntu:22.04:LTSlinux-oem-6.06.0.0-1016.16UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-oracle5.15.0-1030.36USN-5912-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1030.36UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-raspi5.15.0-1025.27UBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-raspi5.15.0-1025.27USN-5935-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-4139
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-4139

Affected products (as reported)

VendorProductVersions
n/a kernel kernel 6.1-rc7

Weakness: CWE-281 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References