The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-alUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-vanilla-develUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-debug-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-kgraftUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-debugUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kb | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1142-azureUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1133-awsUpgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1119-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1145-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-184-genericUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub