The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-optionalUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-preempt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-default-kgraftUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-zteUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade gfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-preemptUpgrade dtb-caviumUpgrade dtb-alUpgrade dtb-sprdUpgrade kernel-zfcpdump-manUpgrade kernel-docs-htmlUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade kselftests-kmp-preemptUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-base | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1133-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-4.15.0-1142-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-4.15.0-1119-kvmUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1145-awsUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-184-genericUpgrade linux-image-virtual | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub