SB20240620174 - Use-after-free in Linux kernel drm vmwgfx driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20240620174

SB20240620174 - Use-after-free in Linux kernel drm vmwgfx driver

Published: June 20, 2024 Updated: May 13, 2025

Security Bulletin ID SB20240620174
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use-after-free (CVE-ID: CVE-2022-48771)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the vmw_kms_helper_buffer_finish() function in drivers/gpu/drm/vmwgfx/vmwgfx_kms.c, within the vmw_fence_event_ioctl() function in drivers/gpu/drm/vmwgfx/vmwgfx_fence.c, within the vmw_execbuf_fence_commands(), vmw_execbuf_copy_fence_user() and vmw_execbuf_process() functions in drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c. A local user can escalate privileges on the system.


Remediation

Install update from vendor's website.

References