In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Fix potential context UAFs
gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer.
[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-headers | Dec 20, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade linux | Aug 22, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-genericUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04 | Feb 25, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub