GSD-2022-1000239 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.18 by commit...

GSD-2022-1000180 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.95 by commit...

GSD-2022-1000146 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.175 by commit...

GSD-2022-1000119 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.227 by commit...

GSD-2022-1000095 drm/vmwgfx: Fix stale file descriptors on failed usercopy

drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.264 by commit...

PT-2022-28517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.18 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28397

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.227 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through 5.10.94 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28424

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14 through 5.4.174 Description The issue is related to stale file descriptors on failed usercopy in the drm/vmwgfx component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5294-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5294-1 advisory. It was discovered that the Packet network protocol implementation in the Linux kernel contained a double- free vulnerability. A local attacker could use...

OESA-2022-1517 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A double free bug in packetsetring in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding...

Vulnerability of the vmw_execbuf_copy_fence_user() function (drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c) in the vmwgfx module of Linux kernel, allowing an attacker to increase their privileges

The vulnerability of the vmwexecbufcopyfenceuser function drivers/gpu/drm/vmwgfx/vmwgfxexecbuf.c in the vmwgfx module of Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.18 and fixes at least the following security issues: A random memory access flaw was found in the Linux kernels GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the...

UBUNTU-CVE-2022-22942

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer...

CVE-2022-22942

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer...

vmwgfx Driver File Descriptor Handling Priv Esc

If the vmwgfx driver fails to copy the 'fencerep' object to userland, it tries to recover by deallocating the already populated file descriptor. This is wrong, as the fd gets released via putunusedfd which shouldn't be used, as the fd table slot was already populated via the previous call to...

PT-2022-1465

Name of the Vulnerable Software and Affected Versions vmwgfx driver affected versions not specified Description The issue is related to a local privilege escalation vulnerability in the vmwgfx driver. This vulnerability allows unprivileged users to gain access to files opened by other processes o...

PT-2022-4755

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory access vulnerability outside the limits OOB has been found in the vmwgfx driver in the Linux kernel, specifically in the drivers/gpu/vmxgfx/vmxgfx kms.c file. This issue is...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0054)

The remote OracleVM system is missing necessary patches to address critical security updates : - qla2xxx: disable target reset during link reset and update version Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix early srb free on abort Quinn Tran Orabug: 32095664 - scsi: qla2xxx: Fix comment in...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0019)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: Remove spurious semicolon Joao Martins Orabug: 31413782 - genirq: Use rcu in kstatirqsusr Eric Dumazet - genirq: Make sparseirqlock protect what it should protect Thomas Gleixner Orabug:...