Vulnerability identifier: #VU62358
Vulnerability risk: Low
Exploitation vector: Local
Exploit availability: No
Vendor: Linux Foundation
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a use-after-free error within the drm_lease_held() function in drivers/gpu/drm/drm_lease.c in the Linux kernel. A local user can run a specially crafted program to trigger a use-after-free error and crash the kernel or gain access to sensitive information.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versions
Linux kernel: All versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?