SB2025032786 - Memory leak in Linux kernel i915 gt driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Memory leak (CVE-ID: CVE-2023-52981)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the capture_engine() function in drivers/gpu/drm/i915/i915_gpu_error.c, within the __guc_reset_context() function in drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c, within the engine_dump_active_requests() function in drivers/gpu/drm/i915/gt/intel_engine_cs.c, within the intel_context_find_active_request() function in drivers/gpu/drm/i915/gt/intel_context.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/86d8ddc74124c3fdfc139f246ba6da15e45e86e3
• https://git.kernel.org/stable/c/9467397f417dd7b5d0db91452f0474e79716a527
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.11