In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Fix null ptr access msm_ioctl_gem_submit()
Fix the below null pointer dereference in msm_ioctl_gem_submit():
26545.260705: Call trace: 26545.263223: kref_put+0x1c/0x60 26545.266452: msm_ioctl_gem_submit+0x254/0x744 26545.270937: drm_ioctl_kernel+0xa8/0x124 26545.274976: drm_ioctl+0x21c/0x33c 26545.278478: drm_compat_ioctl+0xdc/0xf0 26545.282428: __arm64_compat_sys_ioctl+0xc8/0x100 26545.287169: el0_svc_common+0xf8/0x250 26545.291025: do_el0_svc_compat+0x28/0x54 26545.295066: el0_svc_compat+0x10/0x1c 26545.298838: el0_sync_compat_handler+0xa8/0xcc 26545.303403: el0_sync_compat+0x188/0x1c0 26545.307445: Code: d503201f d503201f 52800028 4b0803e8 (b8680008) 26545.318799: Kernel panic - not syncing: Oops: Fatal exception
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub