Security readout for executives and security teams
Plain-English summary
CVE-2022-49635 is a Linux kernel issue in the Intel i915 DRM selftest code. The public description says arithmetic could overflow on some machines or mock tests. The business impact is unclear because no CVSS score, CWE, or exploitation impact is provided.
Executive priority
Treat this as a routine kernel hygiene item unless your Linux vendor assigns a concrete severity or impact. Current public evidence does not support emergency response, but unresolved kernel findings should still be tracked and closed through normal patch cycles.
Technical view
The fix addresses subtraction overflow involving hole_end and possible overflow in addr plus twice min_alignment in drm/i915 selftests. The source bundle references two Linux stable commits. It does not describe privilege impact, reachability from production code, or attacker-controlled inputs.
Likely exposure
Exposure appears limited to Linux kernels containing the affected drm/i915 selftest code, especially systems tracking affected kernel versions. The bundle does not prove exposure for production runtime paths or non-i915 systems.
Exploitation context
No active exploitation is cited, and the CVE is not marked KEV. The supplied sources do not provide a public exploit, attack scenario, or evidence of practical weaponization.
Researcher notes
The public record is sparse. The strongest facts are the affected Linux kernel context, arithmetic overflow description, and stable commit references. Avoid assuming exploitability beyond the selftest code without source review or vendor clarification.
Mitigation direction
- Check Linux vendor advisories for the fixed kernel package.
- Update affected kernels to a vendor-supported build containing the referenced stable fixes.
- Prioritize normal kernel maintenance unless vendor guidance indicates higher urgency.
- Track distro backports because package versions may differ from upstream kernel versions.
Validation and detection
- Inventory Linux kernel versions across managed systems.
- Identify systems using Intel i915 DRM kernel components.
- Confirm whether vendor kernel changelogs include the referenced stable commits.
- Review vulnerability scanner findings against distro-specific backport status.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2022-49635 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/e8997d2d6b8d764e12489f1af2a1ce1d7384ca2aCVE reference, Linux
- https://git.kernel.org/stable/c/333991c4e66b3d4b5613315f18016da80344f659CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.