PT-2019-4502 · Linux+5 · Linux Kernel+5
罗权
·
Published
2018-04-06
·
Updated
2021-03-18
·
CVE-2020-7053
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 4.14 through 4.14.165
Linux kernel versions 4.19 through 4.19.96
Linux kernel versions 5.x before 5.2
Description
The issue is related to a use-after-free in the
i915 ppgtt close function in drivers/gpu/drm/i915/i915 gem gtt.c. This is connected to the i915 gem context destroy ioctl function in drivers/gpu/drm/i915/i915 gem context.c. The vulnerability can be exploited to cause a denial of service using the Intel i915 graphics driver system call.Recommendations
For Linux kernel versions 4.14 through 4.14.165, update to a version after 4.14.165 to resolve the issue.
For Linux kernel versions 4.19 through 4.19.96, update to a version after 4.19.96 to resolve the issue.
For Linux kernel versions 5.x before 5.2, update to version 5.2 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
i915 gem context destroy ioctl system call to minimize the risk of exploitation.Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu