The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: kms: Clear the HVS FIFO commit pointer once done
Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a wait on the previous commit done on a given HVS FIFO.
However, we never cleared that pointer once done. Since drm_crtc_commit_put can free the drm_crtc_commit structure directly if we were the last user, this means that it can lead to a use-after free if we were to duplicate the state, and that stale pointer would even be copied to the new state.
Set the pointer to NULL once we're done with the wait so that we don't carry over a pointer to a free'd structure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-kvmsmall-devel | Aug 9, 2024 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub