CVE-2023-52913

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: Fix potential context UAFs

gem_context_register() makes the context visible to userspace, and which point a separate thread can trigger the I915_GEM_CONTEXT_DESTROY ioctl. So we need to ensure that nothing uses the ctx ptr after this. And we need to ensure that adding the ctx to the xarray is the last thing that gem_context_register() does with the ctx pointer.

[tursulin: Stable and fixes tags add/tidy.] (cherry picked from commit bed4b455cf5374e68879be56971c1da563bcd90c)

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxeb4dedae920a07c485328af3da2202ec5184fb17 < ae278887193110dfeb857ea63e243a3851fbb0bcaffected
LinuxLinuxeb4dedae920a07c485328af3da2202ec5184fb17 < b696c627b3f56e173f7f70b8487d66da8ff22506affected
LinuxLinuxeb4dedae920a07c485328af3da2202ec5184fb17 < afce71ff6daa9c0f852df0727fe32c6fb107f0faaffected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.15.171 <= 5.15.*unaffected
LinuxLinux6.1.7 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References