Vulnerability identifier: #VU24711
Vulnerability risk: Low
CVSSv3.1:
CVE-ID:
CWE-ID:
CWE-416
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the i915_ppgtt_close() function in drivers/gpu/drm/i915/i915_gem_gtt.c, related to i915_gem_context_destroy_ioctl() call in drivers/gpu/drm/i915/i915_gem_context.c. A local user can run a specially crafted application to execute arbitrary code on the system with elevated privileges.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
Linux kernel: 4.4.0 - 5.1.21
CPE
External links
http://bugs.launchpad.net/ubuntu/+source/linux/+bug/1859522
http://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7dc40713618c884bf07c030d1ab1f47a9dc1f310
http://lore.kernel.org/stable/20200114183937.12224-1-tyhicks@canonical.com
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?