5.5

CVE-2026-31781

drm/ioc32: stop speculation on the drm_compat_ioctl path

In the Linux kernel, the following vulnerability has been resolved:

drm/ioc32: stop speculation on the drm_compat_ioctl path

The drm compat ioctl path takes a user controlled pointer, and then
dereferences it into a table of function pointers, the signature method
of spectre problems.  Fix this up by calling array_index_nospec() on the
index to the function pointer list.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.16.63 < 3.17
Linux ≫ Linux Kernel Version >= 4.4.170 < 4.5
Linux ≫ Linux Kernel Version >= 4.9.148 < 4.10
Linux ≫ Linux Kernel Version >= 4.14.91 < 4.15
Linux ≫ Linux Kernel Version >= 4.19.13 < 4.20
Linux ≫ Linux Kernel Version >= 4.20.1 < 5.10.253
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.203
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.168
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.134
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.81
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.22
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.12
Linux ≫ Linux Kernel Version4.20 Update-
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
Linux ≫ Linux Kernel Version7.0 Updaterc4
Linux ≫ Linux Kernel Version7.0 Updaterc5
Linux ≫ Linux Kernel Version7.0 Updaterc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/46a60ee8956ef1975f00455f614761c7ecedc09d
Patch
https://git.kernel.org/stable/c/5bb398991f378ef74d90b14a6ea8b61ff96cc03a
Patch
https://git.kernel.org/stable/c/d59c5d8539662d95887b4564f3f72ad38076a2d5
Patch
https://git.kernel.org/stable/c/489f2ef2b908898d01df697dc4fe1476674be640
Patch
https://git.kernel.org/stable/c/4a41c2b18fc05d30b718d2602cac339eae710b34
Patch
https://git.kernel.org/stable/c/f0e441be08a2eab10b2d06fccfa267ee599dd6b3
Patch
https://git.kernel.org/stable/c/27ef84bba9b9d7b03418c60fbc6069ea0e87b13c
Patch
https://git.kernel.org/stable/c/f8995c2df519f382525ca4bc90553ad2ec611067
Patch