Home

CVE-2022-1419

Description

The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.065

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-base-debuginfo-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debuginfo-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-debugsource-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-azure-devel-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-azure-4.12.14-16.97.1.noarch.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-azure-4.12.14-16.97.1.noarch.rpmLinux
SUSE-SU-2022:1651-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-azure-4.12.14-16.97.1.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-base-debuginfo-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debuginfo-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-debugsource-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-default-devel-debuginfo-4.12.14-122.121.2.x86_64.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-devel-4.12.14-122.121.2.noarch.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-macros-4.12.14-122.121.2.noarch.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-source-4.12.14-122.121.2.noarch.rpmLinux
SUSE-SU-2022:1686-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-syms-4.12.14-122.121.2.x86_64.rpmLinux
Linux kernel (USN-5466-1) linux-image-kvm_4.15.0.1122.115_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-generic_4.15.0.188.173_i386.debLinux
Linux kernel (USN-5466-1) linux-image-generic_4.15.0.188.173_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-virtual_4.15.0.188.173_i386.debLinux
Linux kernel (USN-5466-1) linux-image-virtual_4.15.0.188.173_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-lowlatency_4.15.0.184.172_i386.debLinux
Linux kernel (USN-5466-1) linux-image-lowlatency_4.15.0.188.173_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-aws-lts-18.04_4.15.0.1136.136_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-1119-kvm_4.15.0-1119.123_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-1133-aws_4.15.0-1133.143_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-azure-lts-18.04_4.15.0.1142.114_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-oracle-lts-18.04_4.15.0.1101.108_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-1142-azure_4.15.0-1142.156_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-1098-oracle_4.15.0-1098.108_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-184-generic_4.15.0-184.194_i386.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-184-generic_4.15.0-184.194_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-184-lowlatency_4.15.0-184.194_i386.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-184-lowlatency_4.15.0-184.194_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-gcp-lts-18.04_4.15.0.1127.145_amd64.debLinux
Linux kernel (USN-5466-1) linux-image-4.15.0-1127-gcp_4.15.0-1127.142_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234