The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-preempt-optionalUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-preemptUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-default-kgraftUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debugUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-debug-baseUpgrade kernel-docsUpgrade kernel-azure-develUpgrade dtb-alUpgrade dtb-caviumUpgrade kernel-default-manUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade kselftests-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade dlm-kmp-default | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-4.15.0-1133-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1142-azureUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-184-genericUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1119-kvm | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub