7.8

CVE-2023-54202

drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

Userspace can guess the id value and try to race oa_config object creation
with config remove, resulting in a use-after-free if we dereference the
object after unlocking the metrics_lock.  For that reason, unlocking the
metrics_lock must be done after we are done dereferencing the object.

[tursulin: Manually added stable tag.]
(cherry picked from commit 49f6f6483b652108bcb73accd0204a464b922395)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f89823c212246d0671cc51e69894a3df1a743aee
Version < 6eeb1cba4c9dc47656ea328afa34953c28783d8c
Status affected
Version f89823c212246d0671cc51e69894a3df1a743aee
Version < 240b1502708858b5e3f10b6dc5ca3f148a322fef
Status affected
Version f89823c212246d0671cc51e69894a3df1a743aee
Version < 7eb98f5ac551863efe8be810cea1cd5411d677b1
Status affected
Version f89823c212246d0671cc51e69894a3df1a743aee
Version < dc30c011469165d57af9adac5baff7d767d20e5c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.14
Status affected
Version 0
Version < 4.14
Status unaffected
Version <= 5.15.*
Version 5.15.108
Status unaffected
Version <= 6.1.*
Version 6.1.24
Status unaffected
Version <= 6.2.*
Version 6.2.11
Status unaffected
Version <= *
Version 6.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6eeb1cba4c9dc47656ea328afa34953c28783d8c
https://git.kernel.org/stable/c/240b1502708858b5e3f10b6dc5ca3f148a322fef
https://git.kernel.org/stable/c/7eb98f5ac551863efe8be810cea1cd5411d677b1
https://git.kernel.org/stable/c/dc30c011469165d57af9adac5baff7d767d20e5c