In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: avoid a use-after-free when BO init fails
nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm_bo_init() invokes the provided destructor which should de-initialize and free the memory.
Thus, when nouveau_bo_init() returns an error the gem object has already been released and the memory freed by nouveau_bo_del_ttm().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-debug | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub