Security readout for executives and security teams
Plain-English summary
CVE-2022-48662 is a Linux kernel flaw in the Intel i915 graphics driver. A local low-privileged user could trigger a crash path in GPU performance handling, with CVSS scoring indicating potential confidentiality, integrity, and availability impact. Evidence provided does not show active exploitation.
Executive priority
Treat as high priority where Linux endpoints or multi-user systems use Intel i915 graphics. The issue is local, so it is less urgent than a remote exploit, but the CVSS impact and kernel context justify timely patch validation.
Technical view
The bug is in drm/i915/gem context list lifetime handling. i915_perf relied on an i915_gem_context reference while iterating i915->gem.contexts.list, but context_close() could remove the list entry early, poisoning link.next and causing a general protection fault. The kernel fix moves i915_gem_context.link under reference protection.
Likely exposure
Exposure is most likely on Linux systems running affected kernel versions with Intel i915 graphics driver paths available to local users. The provided data lists Linux kernel versions around 5.12 through 6.0 and fixed stable commits. Systems without i915 usage or without local untrusted users are less exposed.
Exploitation context
The CVSS vector is local, low complexity, low privilege, no user interaction. KEV is false in the provided bundle, and no cited source states active exploitation. The evidence shows a crash trace through i915_perf_open_ioctl, not public exploitation activity.
Researcher notes
Key research focus is whether deployed kernels include the stable fixes and whether i915 perf interfaces are reachable by local users. The source bundle identifies the failure mode and commits but does not provide distro package mappings or exploitation evidence.
Mitigation direction
- Update to a kernel build containing the referenced stable fixes.
- Confirm distribution vendor guidance for CVE-2022-48662 before assuming patch coverage.
- Prioritize patching shared workstations, developer systems, and GPU-enabled multi-user hosts.
- Reduce untrusted local access to affected i915 systems until patched.
Validation and detection
- Inventory Linux hosts using Intel i915 graphics paths.
- Compare kernel versions against vendor advisories for CVE-2022-48662.
- Confirm the referenced stable commits are included or backported.
- Review kernel logs for i915_perf_open_ioctl general protection fault patterns.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-119: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2022-48662 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/713fa3e4591f65f804bdc88e8648e219fabc9ee1CVE reference, Linux
- https://git.kernel.org/stable/c/f799e0568d6c153368b177e0bbbde7dcc4ce7f1dCVE reference, Linux
- https://git.kernel.org/stable/c/d119888b09bd567e07c6b93a07f175df88857e02CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.