The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade dtb-zteUpgrade kselftests-kmp-preemptUpgrade kernel-vanilla-baseUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade dtb-qcomUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade dtb-alUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-preempt-extraUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-develUpgrade cluster-md-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-kgraftUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kb | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1119-kvmUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-184-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1142-azureUpgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-gkeUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-4.15.0-1133-aws | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub