In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access. Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses. Additionally, the calculations have been rewritten in a clearer and more understandable form. [Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/i915/gem: Arreglar el cálculo de los límites del mapeo de la memoria virtual. El cálculo del tamaño del área mapeada como el valor menor entre el tamaño solicitado y el tamaño real no considera el desplazamiento del mapeo parcial. . Esto puede provocar un error de acceso a la página. Corrija el cálculo de las direcciones inicial y final; el tamaño total ahora se deduce de la diferencia entre las direcciones final e inicial. Además, los cálculos se han reescrito de una forma más clara y comprensible. [Joonas: Add Requires: tag] Requiere: 60a2066c5005 ("drm/i915/gem: Ajustar el desplazamiento de vma para el desplazamiento de mmap del framebuffer") (seleccionado de la confirmación 97b6784753da06d9d40232328efc5c5367e53417)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-131
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340225540> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340225c40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd37019c940> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2a039f240> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340224b80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd340224340> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2a0134980> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |