Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cache_ent' could be set NULL inside virtio_gpu_cmd_get_capset() and it will lead to a NULL dereference by a lately use of it (i.e., ptr = cache_ent->caps_cache). Fix it with a NULL check. [ kraxel: minor codestyle fixup ]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 before 259773fc874258606c0121767a4a27466ff337eb; affected 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 before 39caef09666c1d8274abf9472c72bcac236dc5fb; affected 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 before adbdd21983fa292e53aec3eab97306b2961ea887; affected 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 before 367882a5a9448b5e1ba756125308092d614cb96c; affected 62fb7a5e10962ac6ae2a2d2dbd3aedcb2a3e3257 before bd63f11f4c3c46afec07d821f74736161ff6e526 |
| Linux / Linux | affected 4.4; unaffected 0 before 4.4; unaffected 5.10.137 through 5.10.*; unaffected 5.15.61 through 5.15.*; unaffected 5.18.18 through 5.18.*; unaffected 5.19.2 through 5.19.*; unaffected 6.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/259773fc874258606c0121767a4a27466ff337eb
- https://git.kernel.org/stable/c/39caef09666c1d8274abf9472c72bcac236dc5fb
- https://git.kernel.org/stable/c/adbdd21983fa292e53aec3eab97306b2961ea887
- https://git.kernel.org/stable/c/367882a5a9448b5e1ba756125308092d614cb96c
- https://git.kernel.org/stable/c/bd63f11f4c3c46afec07d821f74736161ff6e526