In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Fix potential context UAFs
gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer.
[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perf | Dec 20, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade linux | Aug 22, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt | Feb 25, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub