CVE-2022-50037 drm/i915/ttm: don't leak the ccs state
A local attacker can read sensitive CCS state data from previous users due to improper memory handling in the i915 graphics driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-50037?
CVE-2022-50037 is a medium-severity vulnerability in Linux kernel, published on 18 Jun 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/ttm: don't leak the ccs state
The kernel only manages the ccs state with lmem-only objects, however the kernel should still take care not to leak the CCS state from the previous user.
(cherry picked from commit 353819d85f87be46aeb9c1dd929d445a006fc6ec)
Which versions are affected by CVE-2022-50037?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-50037?
Apply the vendor's patch.
Is CVE-2022-50037 being exploited?
There is no known exploitation of CVE-2022-50037 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-50037, GHSA-ww92-9rhr-29hv, UBUNTU-CVE-2022-50037.