drm/virtio: Check whether transferred 2D BO is shmem
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 86% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
drm/virtio: Check whether transferred 2D BO is shmem
Transferred 2D BO always must be a shmem BO. Add check for that to prevent
NULL dereference if userspace passes a VRAM BO.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/36e133af33ea54193378b190cf92c47c12a43d34https://git.kernel.org/stable/c/989164305b933af06d69bb91044dafbd01025371https://git.kernel.org/stable/c/e473216b42aa1fd9fc6b94b608b42c210c655908https://git.kernel.org/stable/c/f122bcb34f1a4b02ef3d95058d8fd1316ea03785https://git.kernel.org/stable/c/f134f261d76ae3d5ecf68db642eaa746ceb84cfb