CVSS 7.8 · High EPSS 0,16%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting panfrost_gem_create_with_handle() previously returned a BO but with the only reference being from the handle, which user space could in theory guess and release, causing a use-after-free. Additionally if the call to panfrost_gem_mapping_get() in panfrost_ioctl_create_bo() failed then a(nother) reference on the BO was dropped. The _create_with_handle() is a problematic pattern, so ditch it and instead create the handle in panfrost_ioctl_create_bo(). If the call to panfrost_gem_mapping_get() fails then this means that user space has indeed gone behind our back and freed the handle. In which case just return an error code.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 5.2 hingga sebelum 5.10.163 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.87 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.0.19 |
| linux | linux kernel | Versi 6.1 hingga sebelum 6.1.5 |
| linux | linux kernel | Versi 6.2 rc1 |
| linux | linux kernel | Versi 6.2 rc2 |