The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-default-livepatch-develUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-zfcpdump-manUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-vanilla-develUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-preemptUpgrade dtb-alteraUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-preempt-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-vanillaUpgrade kernel-default-kgraftUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-optionalUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-exynosUpgrade kselftests-kmp-64kb | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1133-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1142-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-184-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-4.15.0-1119-kvmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-azure-lts-18.04 | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub