In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Feb 26, 2020 | Dec 31, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 31, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docs | Mar 3, 2020 | Dec 31, 2019 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-gcpUpgrade linux-kvmUpgrade linuxUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oemUpgrade linux-awsUpgrade linux-azureUpgrade linux-snapdragonUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-hwe-edge | Nov 19, 2024 | Dec 31, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub