Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() If virtio_gpu_object_shmem_init() fails (e.g. due to fault injection, as it happened in the bug report by syzbot), virtio_gpu_array_put_free() could be called with objs equal to NULL. Ensure that objs is not NULL in virtio_gpu_array_put_free(), or otherwise return from the function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 377f8331d0565e6f71ba081c894029a92d0c7e77 before b094fece3810c71ceee6f0921676cb65d4e68c5a; affected 377f8331d0565e6f71ba081c894029a92d0c7e77 before ac92b474eeeed75b8660374ba1d129a121c09da8; affected 377f8331d0565e6f71ba081c894029a92d0c7e77 before abc9ad36df16e27ac1c665085157f1a082d39bac; affected 377f8331d0565e6f71ba081c894029a92d0c7e77 before 6b79f96f4a23846516e5e6e4dd37fc06f43a60dd; affected 244dbb4abe123779ec30e7c6ca283a681aba5c94; affected 1016c0f62f73d5d2c3a5d1ad1e1fb0cdce1993ae; affected 5.11.20 before 5.12; affected 5.12.3 before 5.13 |
| Linux / Linux | affected 5.13; unaffected 0 before 5.13; unaffected 5.15.32 through 5.15.*; unaffected 5.16.18 through 5.16.*; unaffected 5.17.1 through 5.17.*; unaffected 5.18 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/b094fece3810c71ceee6f0921676cb65d4e68c5a
- https://git.kernel.org/stable/c/ac92b474eeeed75b8660374ba1d129a121c09da8
- https://git.kernel.org/stable/c/abc9ad36df16e27ac1c665085157f1a082d39bac
- https://git.kernel.org/stable/c/6b79f96f4a23846516e5e6e4dd37fc06f43a60dd
ADP enrichment
No English description supplied.
No references supplied.