i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2019 |
| Ubuntu | — | Upgrade linux-lts-xenialUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linuxUpgrade linux-oemUpgrade linux-kvmUpgrade linux-azureUpgrade linux-gke-4.15Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-snapdragonUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux-aws-hweUpgrade linux-fips | Nov 19, 2024 | Jun 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub