This security bulletin contains one low risk vulnerability.
CWE-416 - Use After Free
Exploit availability: NoDescription
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a use-after-free error within the drm_lease_held() function in drivers/gpu/drm/drm_lease.c in the Linux kernel. A local user can run a specially crafted program to trigger a use-after-free error and crash the kernel or gain access to sensitive information.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.Vulnerable software versions
Linux kernel: All versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?