In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: avoid a use-after-free when BO init fails
nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm_bo_init() invokes the provided destructor which should de-initialize and free the memory.
Thus, when nouveau_bo_init() returns an error the gem object has already been released and the memory freed by nouveau_bo_del_ttm().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-preemptUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub