PT-2021-7013 · Linux+6 · Linux Kernel+6

Minh Yuan · Published 2021-06-08 · Updated 2023-06-03 · CVE-2022-1280

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue was found in the drm lease held function in drivers/gpu/drm/drm lease.c due to a race problem, allowing a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak. This flaw can be exploited by a specially crafted program to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-1797

ALT-PU-2022-1873

ALT-PU-2022-2152

BDU:2022-02967

CESA-2022_7683

CVE-2022-1280

OESA-2023-1303

OESA-2023-1304

OPENSUSE-SU-2022_1676-1

OPENSUSE-SU-2022_1687-1

RHSA-2022:7683

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022_7683

RHSA-2022_7933

RHSA-2022_8267

SUSE-SU-2022:1651-1

SUSE-SU-2022:1668-1

SUSE-SU-2022:1669-1

SUSE-SU-2022:1676-1

SUSE-SU-2022:1686-1

SUSE-SU-2022:1687-1

SUSE-SU-2022:1783-1

SUSE-SU-2022:1796-1

SUSE-SU-2022:1849-1

SUSE-SU-2022:1859-1

SUSE-SU-2022:2268-1

SUSE-SU-2022_1651-1

SUSE-SU-2022_1669-1

SUSE-SU-2022_1676-1

SUSE-SU-2022_1686-1

SUSE-SU-2022_1687-1

SUSE-SU-2022_1783-1

SUSE-SU-2022_1796-1

SUSE-SU-2022_1849-1

SUSE-SU-2022_1859-1

Affected Products

Alt Linux

Almalinux

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 215

• https://osv.dev/vulnerability/SUSE-SU-2022:1849-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-7933.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-8267.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1280 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1796-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1303 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9829.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1676-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1668-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1687-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9828.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-1280 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1651-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36694 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2268-1 · Vendor Advisory