In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debug-core | Aug 12, 2024 | Jun 3, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 9, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jun 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-kvm | Aug 22, 2024 | Jun 3, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-devel | Jul 10, 2024 | Jun 3, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oem-20.04 | Aug 9, 2024 | Jun 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub