CVE-2020-7053
Summary
| CVE | CVE-2020-7053 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-01-14 21:15:00 UTC |
| Updated | 2023-11-07 03:25:00 UTC |
| Description | In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_ioctl in drivers/gpu/drm/i915/i915_gem_context.c. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| January 2020 Linux Kernel Vulnerabilities in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2 |
MISC |
cdn.kernel.org |
Third Party Advisory |
| USN-4255-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| kernel/git/torvalds/linux.git - Linux kernel source tree |
MISC |
git.kernel.org |
Patch, Third Party Advisory |
| USN-4255-2: Linux kernel (HWE) vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| USN-4287-2: Linux kernel (Azure) vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| [security-announce] openSUSE-SU-2020:0336-1: important: Security update |
SUSE |
lists.opensuse.org |
|
| USN-4285-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| Kernel Live Patch Security Notice LSN-0063-1 ≈ Packet Storm |
MISC |
packetstormsecurity.com |
|
| USN-4287-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu |
UBUNTU |
usn.ubuntu.com |
|
| [PATCH] drm/i915: Fix use-after-free when destroying GEM context - Tyler Hicks |
|
lore.kernel.org |
|
| [PATCH] drm/i915: Fix use-after-free when destroying GEM context - Tyler Hicks |
MISC |
lore.kernel.org |
Patch, Third Party Advisory |
| Bug #1859522 “use-after-free in i915_ppgtt_close” : Bugs : linux package : Ubuntu |
CONFIRM |
bugs.launchpad.net |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 239151 Red Hat Update for kernel (RHSA-2021:0856)
- 257070 CentOS Security Update for kernel (CESA-2021:0856)