Riskcovery

CVE-2023-52913

drm/i915: Fix potential context UAFs

State
Published
Severity
7.8 High
Published
Aug 21, 2024
Updated
Aug 5, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix potential context UAFs

gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the *last* thing that gem_context_register() does with the ctx pointer.

[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eb4dedae920a07c485328af3da2202ec5184fb17 to before ae278887193110dfeb857ea63e243a3851fbb0bcAffected
  • eb4dedae920a07c485328af3da2202ec5184fb17 to before b696c627b3f56e173f7f70b8487d66da8ff22506Affected
  • eb4dedae920a07c485328af3da2202ec5184fb17 to before afce71ff6daa9c0f852df0727fe32c6fb107f0faAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.15.171 through 5.15.*Not affected
  • 6.1.7 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.