A use-after-free(UAF) vulnerability was found in function 'vmw_cmd_res_check' in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel's vmwgfx driver with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel | Nov 28, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Sep 9, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Sep 9, 2022 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade dtb-marvellUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-hisilicon | Sep 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade linux-oem-6.1 | Nov 19, 2024 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub