7.8

CVE-2022-49645

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

In the Linux kernel, the following vulnerability has been resolved:

drm/panfrost: Fix shrinker list corruption by madvise IOCTL

Calling madvise IOCTL twice on BO causes memory shrinker list corruption
and crashes kernel because BO is already on the list and it's added to
the list again, while BO should be removed from the list before it's
re-added. Fix it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4 < 5.4.207
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.132
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.56
Linux ≫ Linux Kernel Version >= 5.16 < 5.18.13
Linux ≫ Linux Kernel Version5.19 Updaterc1
Linux ≫ Linux Kernel Version5.19 Updaterc2
Linux ≫ Linux Kernel Version5.19 Updaterc3
Linux ≫ Linux Kernel Version5.19 Updaterc4
Linux ≫ Linux Kernel Version5.19 Updaterc5
Linux ≫ Linux Kernel Version5.19 Updaterc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.18
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240
Patch
https://git.kernel.org/stable/c/1807d8867402a58b831a7fc16832747ff559a0d1
Patch
https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0
Patch
https://git.kernel.org/stable/c/9fc33eaaa979d112d10fea729edcd2a2e21aa912
Patch
https://git.kernel.org/stable/c/f036392edd9c49090781d8cca26ad6557a63bae4
Patch