The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 11, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-debugUpgrade cluster-md-kmp-preemptUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-default-kgraftUpgrade kernel-default-optionalUpgrade kernel-preempt-optionalUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-develUpgrade dlm-kmp-preemptUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-default-base-rebuildUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-base | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-184-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1127-gcpUpgrade linux-image-4.15.0-1142-azureUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1098-oracleUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1133-awsUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1132-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1114-raspi2Upgrade linux-image-4.15.0-1133-aws-hweUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-4.15.0-1119-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-184-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-184-genericUpgrade linux-image-4.4.0-1145-aws | Jun 8, 2022 | May 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub