In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Fix potential context UAFs
gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer.
[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.173-118.169 | Dec 20, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade linux | Aug 22, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-genericUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-lpae | Feb 25, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub