In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Feb 26, 2020 | Dec 31, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 31, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Mar 3, 2020 | Dec 31, 2019 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-hwe-edgeUpgrade linux-awsUpgrade linux-fipsUpgrade linux-oemUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-aws-hweUpgrade linux-raspi2Upgrade linux-hweUpgrade linux-oracleUpgrade linuxUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-azure-fips | Nov 19, 2024 | Dec 31, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub