In the Linux kernel, the following vulnerability has been resolved:
drm/i915: Fix potential context UAFs
gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer.
[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfo | Dec 20, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade linux | Aug 22, 2024 | Aug 22, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-genericUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15 | Feb 25, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub