A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-intel-iot-realtimeUpgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-oem-6.1Upgrade linux-gkeopUpgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linuxUpgrade linux-aws | Nov 19, 2024 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub