CVE-2024-53115

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle

The 'vmw_user_object_buffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the vmw_framebuffer_surface_create_handle.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd6667f0ddf46c671d379cd5fe66ce0a54d2a743a < 36f64da080555175b58d85f99f5f90435e274e56affected
LinuxLinuxd6667f0ddf46c671d379cd5fe66ce0a54d2a743a < 93d1f41a82de382845af460bf03bcb17dcbf08c5affected
LinuxLinuxaf6441e6f3d41e95bfc5bfc11960c259bb4f0f11affected
LinuxLinux6.10.4 < 6.11affected
LinuxLinux6.11affected
LinuxLinux0 < 6.11unaffected
LinuxLinux6.11.10 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References