CVE-2022-48771

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usercopy of the fence_rep object will lead to a stale entry in the file descriptor table as put_unused_fd() won't release it. This enables userland to refer to a dangling 'file' object through that still valid file descriptor, leading to all kinds of use-after-free exploitation scenarios. Fix this by deferring the call to fd_install() until after the usercopy has succeeded.

• linux linux kernel (>= 4.14 < 4.14.264) • linux linux kernel (>= 4.15 < 4.19.227) • linux linux kernel (>= 4.20 < 5.4.175) • linux linux kernel (>= 5.5 < 5.10.95) • linux linux kernel (>= 5.11 < 5.15.18) • linux linux kernel (>= 5.16 < 5.16.4) • linux linux kernel 5.17