CVE-2023-52913

MEDIUM EPSS 14.8%
Published Aug 21, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Aug 21, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer. [tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.8.11  –  <5.9
linuxlinux_kernel*≥5.10  –  <6.1.7
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/ae278887193110dfeb857ea63e243a3851fbb0bc
  • git.kernel.org https://git.kernel.org/stable/c/afce71ff6daa9c0f852df0727fe32c6fb107f0fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b696c627b3f56e173f7f70b8487d66da8ff22506
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/afce71ff6daa9c0f852df0727fe32c6fb107f0fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b696c627b3f56e173f7f70b8487d66da8ff22506
    Patch