In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules | Aug 12, 2024 | Jun 3, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | Jun 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 3, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfo | Aug 22, 2024 | Jun 3, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dtb-marvell | Jul 10, 2024 | Jun 3, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1062-nvidia | Aug 9, 2024 | Jun 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub