CVE-2023-3355

2023-06-2800:00:00

ubuntu.com

linux

kernel

null pointer

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

5.1%

JSON

A NULL pointer dereference flaw was found in the Linux kernel’s
drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds
function, which fails because it lacks a check of the return value of
kmalloc(). This issue allows a local user to crash the system.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-75.82UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1038.43UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1038.43~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1040.47UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1040.47~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1041.48.1UNKNOWN
ubuntu20.04noarchlinux-azure-fde-5.15< 5.15.0-1040.47~20.04.1.1UNKNOWN
ubuntu22.04noarchlinux-bluefield< anyUNKNOWN
ubuntu22.04noarchlinux-gcp< 5.15.0-1036.44UNKNOWN
ubuntu20.04noarchlinux-gcp-5.15< 5.15.0-1036.44~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-75.82	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1038.43	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1038.43~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1040.47	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1040.47~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1041.48.1	UNKNOWN
ubuntu	20.04	noarch	linux-azure-fde-5.15	< 5.15.0-1040.47~20.04.1.1	UNKNOWN
ubuntu	22.04	noarch	linux-bluefield	< any	UNKNOWN
ubuntu	22.04	noarch	linux-gcp	< 5.15.0-1036.44	UNKNOWN
ubuntu	20.04	noarch	linux-gcp-5.15	< 5.15.0-1036.44~20.04.1	UNKNOWN