CVE-2020-12363

i915: Bad input validation in GuC firmware leading to DoS

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html

Notes

 carnil> Claimed to affect versions before Linux kernel version 5.5.
 carnil> Not adding fixed versions as wanting to try to pinpoint the
 carnil> respective needed commits for correct tracking.
 carnil> Per Intel, this was fixed by a firmware update. v49.0.1 of the
 carnil> firmware is required. The new firmware requires a kernel patch
 carnil> https://git.kernel.org/linus/c784e5249e773689e38d2bc1749f08b986621a26
 carnil> So might not be treaded as Linux issue itself.
 bwh> Let's treat it as both firmware and kernel, similar to CPU issues
 bwh> that need both microcode and kernel changes.

Bugs

Status

Branch	Status
4.19-buster-security	needed
4.19-upstream-stable	needed
5.10-bullseye-security	needed
5.10-upstream-stable	needed
6.1-bookworm-security	N/A "Fixed before branch point"
6.1-upstream-stable	N/A "Fixed before branch point"
6.6-upstream-stable	unknown
6.8-upstream-stable	unknown
sid	released (5.14.6-1)
upstream	released (5.11-rc1) [c784e5249e773689e38d2bc1749f08b986621a26]