Anand K Mistry

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free error in the `drm gem ttm mmap()` function. When the `drm gem ttm mmap()` function drops a reference to the gem object on success and the gem object's refcount equals 1, it can lead to a situation where the subsequent `drm gem object get()` call results in a use-after-free (UAF) error. This can potentially allow an attacker to elevate privileges in the system. The issue was foreseeable when reference dropping was added in a previous commit. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.