In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix stale file descriptors on failed usercopy
A failing usercopy of the fence_rep object will lead to a stale entry in the file descriptor table as put_unused_fd() won't release it. This enables userland to refer to a dangling 'file' object through that still valid file descriptor, leading to all kinds of use-after-free exploitation scenarios.
Fix this by deferring the call to fd_install() until after the usercopy has succeeded.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub