In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-core | Aug 12, 2024 | Jun 3, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 9, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-cross-headers | Aug 22, 2024 | Jun 3, 2024 |
| Suse | — | Upgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-rt-extra | Jul 10, 2024 | Jun 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-intelUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1130-aws | Aug 9, 2024 | Jun 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub