In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: kms: Add missing drm_crtc_commit_put
Commit 9ec03d7f1ed3 ("drm/vc4: kms: Wait on previous FIFO users before a commit") introduced a global state for the HVS, with each FIFO storing the current CRTC commit so that we can properly synchronize commits.
However, the refcounting was off and we thus ended up leaking the drm_crtc_commit structure every commit. Add a drm_crtc_commit_put to prevent the leakage.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-docsUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub