There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 24, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-devel | Sep 16, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | Oct 26, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Jul 19, 2021 | May 28, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perf | May 18, 2021 | May 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 2, 2021 | May 28, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 7, 2022 | Aug 13, 2020 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-livepatch-5_3_18-150300_59_68-defaultUpgrade dtb-zteUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-develUpgrade kernel-vanillaUpgrade kernel-livepatch-4_12_14-150100_197_114-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-debug-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade dtb-armUpgrade kernel-preemptUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-symsUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-preempt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dlm-kmp-preemptUpgrade dtb-amdUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-kvmsmall-baseUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-default-kgraftUpgrade kernel-livepatch-4_12_14-150000_150_92-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-azure-baseUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extra | Oct 26, 2022 | May 28, 2021 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1085-raspi2Upgrade linux-image-4.15.0-1114-azureUpgrade linux-image-dell300xUpgrade linux-image-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.15.0-143-generic-lpaeUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-4.15.0-1102-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-143-genericUpgrade linux-image-4.15.0-1091-kvmUpgrade linux-image-4.15.0-1102-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.15.0-1071-oracleUpgrade linux-image-4.15.0-143-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1099-gcpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1018-dell300xUpgrade linux-image-generic-lpae | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub