CVE-2022-38457

UAF vulnerability in vmwgfx driver

References

Notes

 bwh> Probably introduced in 4.20 by commit e8c66efbfe3a "drm/vmwgfx: Make
 bwh> user resource lookups reference-free during validation".
 carnil> According to Zack Rusin fixed conceptually via a309c7194e8a
 carnil> ("drm/vmwgfx: Remove rcu locks from user resources")

Bugs

Status

Branch Status
4.19-buster-security N/A "Vulnerable code not present"
4.19-upstream-stable N/A "Vulnerable code not present"
5.10-bullseye-security needed
5.10-upstream-stable needed
6.1-bookworm-security N/A "Fixed before branch point"
6.1-upstream-stable released (6.1.7) [7ac9578e45b20e3f3c0c8eb71f5417a499a7226a]
6.6-upstream-stable unknown
6.8-upstream-stable unknown
sid released (6.1.7-1)
upstream released (6.2-rc4) [a309c7194e8a2f8bd4539b9449917913f6c2cd50]