Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/xe/ufence: Prefetch ufence addr to catch bogus address access_ok() only checks for addr overflow so also try to read the addr to catch invalid addr sent from userspace. (cherry picked from commit 9408c4508483ffc60811e910a93d6425b8e63928)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected dd08ebf6c3525a7ea2186e636df064ea47281987 before 5d623ffbae96b23f1fc43a3d5a267aabdb07583d; affected dd08ebf6c3525a7ea2186e636df064ea47281987 before 9c1813b3253480b30604c680026c7dc721ce86d1 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 6.11.9 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/5d623ffbae96b23f1fc43a3d5a267aabdb07583d
- https://git.kernel.org/stable/c/9c1813b3253480b30604c680026c7dc721ce86d1
ADP enrichment
No English description supplied.
No references supplied.