In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling ttm_bo_validate(), mov…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential UAF in TTM object purge TLDR: The bo->ttm object might be changed by calling ttm_bo_validate(), move casting it to an i915_tt object later to actually get the right pointer. A user reported hitting the following bug under heavy use on DG2: [26620.095550] Oops: general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 1 SMP NOPTI [26620.095556] CPU: 2 UID: 0 PID…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/073bcbc95e9648c976da1654c7590a8d6ee12c2d
- https://git.kernel.org/stable/c/28b22dbaf407598cb3bb1d2c586a6f8018690ac2
- https://git.kernel.org/stable/c/5c4063c87a619e4df954c179d24628636f5db15f
- https://git.kernel.org/stable/c/a29654d451bbffe63d584a4cf64ad0efce6bcf1c
- https://git.kernel.org/stable/c/c9ae7e7e3bc98615364313b08d7acea5239ded0b
- https://git.kernel.org/stable/c/df73f3bc731af1c39ac5405bc59c4e7c6f8e9117
Timeline
- nvd_ingest NVD