In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 31, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Feb 26, 2020 | Dec 31, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 31, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-man | Mar 3, 2020 | Dec 31, 2019 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linuxUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-awsUpgrade linux-oemUpgrade linux-azureUpgrade linux-snapdragonUpgrade linux-oem-osp1Upgrade linux-fipsUpgrade linux-gke-4.15Upgrade linux-raspi2Upgrade linux-aws-hweUpgrade linux-hwe-edge | Nov 19, 2024 | Dec 31, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub