CLSA-2024-1733483766 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

The vulnerabilities of DRM/MSM/A6XX components in Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of DRM/MSM/A6XX components in the Linux operating system is related to reading data outside of the allowed range. Exploiting this vulnerability can allow a hacker to cause service failures...

UBUNTU-CVE-2024-53132

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drmWARN: 953.586396 xe 0000:00:02.0: drm Missing outer runtime PM protection ... 953.587090 ? xepmruntimegetnoresume+0x8d/0xa0 xe 953.587208...

The vulnerability of components related to DRM/AMD/AMDKFD in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/AMDKFD component in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing external runtime PM protection warning in the drm/xe driver...

The vulnerability of the drm_sched_entity_kill_jobs() function in the Linux operating system allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the drmschedentitykilljobs function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user that may make improper GPU system calls to enable unauthorized reads and writes to physical memory of the...

CVE-2024-11691

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox 13...

Vulnerability of components such as DRM, AMDGPU, and system kernel firewalls in Linux operating systems, which can be exploited by attackers to cause service failures.

The vulnerability of components such as DRM, AMDGPU, and the operating system kernel’s Fence function in Linux is related to the assignment of the NULL pointer in the amdgpufencedriverswfini function. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of DRM/VMWGFX components in Linux operating systems allows attackers to increase their privileges within the system.

The vulnerability of DRM/VMWGFX components in Linux operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of components related to DRM/Nouveau kernels in Linux operating systems, which allows a hacker to trigger a service failure.

The vulnerability of components of the DRM/Nouveau kernel in the Linux operating system is related to incorrect blocking in the nouveaugemioctlpushbuf function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the DRM/GMA500 components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/GMA500 components in Linux operating systems is related to incorrect blocking in the gmacrtcpageflip function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the amdgpu_job_free_cb() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpujobfreecb function in the drivers/gpu/drm/amd/amdgpu/amdgpujob.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver DDK24.2 RTM1 and earlier versions, which originates from software installed and run as an unprivileged user, and may make improper GPU system calls to access the graphics buffer...

The vulnerability of the xe_vm_create_ioctl() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xevmcreateioctl function in the drivers/gpu/drm/xe/xevm.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CLSA-2024-1731605761 Fix of 67 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of -fdfd in dodup2 from mispredictions CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci:...

The vulnerability of NVIDIA’s graphics driver for Windows, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of NVIDIA’s graphics driver for Windows relates to reading data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

The vulnerability of NVIDIA’s graphics driver for Windows, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of NVIDIA’s graphics driver for Windows relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

CVE-2024-38387

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38387

CVE-2024-38387 affects the Intel® Graphics Driver installers for Windows (versions 15.40 and 15.45). The root cause is an uncontrolled search path, which can let an authenticated user potentially escalate privileges via local access. Affected components are the Intel Graphics Driver installers, n...