Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L H L N U N N H 4.7 .0024 16.1 —
AFFECTED Product Versions Fixed Linux 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 – — Linux 4.4 – 4.19.270
TIMELINE Aug 21 Reserved by Linux Aug 21 Published (CNA: Linux) Aug 4 RESCORED — CVE-2022-48899 (Linux). CVSS 7.8 → 4.7 (NVD).
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done *after* we are done dereferencing the object.
| Date | Event | Detail |
|---|---|---|
| August 21, 2024 | Reserved | Reserved by Linux |
| August 21, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2022-48899 (Linux). CVSS 7.8 → 4.7 (NVD). |
Authoritative record: CVE-2022-48899 at cve.org
Vendors: linux
Weaknesses: CWE-416
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2022-48899 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.