CVE-2022-1419: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: before 5.6 (fixed in 5.6); version 5.6 only

Published 2022-06-02. Last modified 2026-06-17.