GSD-2023-1001799 drm/virtio: Fix GEM handle creation UAF

drm/virtio: Fix GEM handle creation UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...

PT-2023-34844 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v5.15.89. The actual impact and attack...

PT-2023-34910 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.270 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v4.19.270. The actual impact and attack...

PT-2023-34875 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v5.10.164. The actual impact and attack...

PT-2023-34897 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.4 through 5.4.228 Description: The issue is related to a use-after-free UAF vulnerability in the drm/virtio component. It was introduced in version v4.4 and fixed in version v5.4.229. The actual impact and attack...

PT-2023-9445 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm/virtio component of the Linux kernel, where userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a...

PT-2022-35393 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns the drm/virtio component, specifically the handling of transferred 2D BO Buffer Object that is shmem. The actual impact and potential for attack have not been proven yet...

PT-2022-35571 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue concerns the drm/virtio component, specifically the handling of transferred 2D BO Buffer Object that is shmem. The actual impact and potential for attack have not been fully...

PT-2025-53960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/virtio subsystem. The issue involves a missing check to ensure that transferred 2D buffer objects BO are shared memory shmem objects. If a userspa...