Updated: 2023-11-07 19:11:11.890599
Description:
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Links | NIST | CIRCL | RHEL | Ubuntu |
Severity | Score | |
---|---|---|
CVSS Version 2.x | 0 | |
CVSS Version 3.x | HIGH | 7.8 |
OS name | Project name | Version | Score | Severity | Status | Errata | Last updated |
---|---|---|---|---|---|---|---|
AlmaLinux 9.2 ESU | kernel | 5.14.0 | 7.8 | HIGH | Needs Triage | 2023-11-07 16:15:59 | |
AlmaLinux 9.2 FIPS | kernel | 5.14.0 | 7.8 | HIGH | In Testing | 2024-03-17 21:36:28 | |
CentOS 7 ELS | kernel | 3.10.0 | 7.8 | HIGH | Needs Triage | 2023-09-18 17:11:39 | |
CentOS 8.4 ELS | kernel | 4.18.0 | 7.8 | HIGH | Released | CLSA-2023:1693426883 | 2023-08-30 17:07:44 |
CentOS 8.5 ELS | kernel | 4.18.0 | 7.8 | HIGH | Released | CLSA-2023:1693424916 | 2023-08-30 17:07:45 |
Ubuntu 16.04 ELS | linux | 4.4.0 | 7.8 | HIGH | Released | CLSA-2023:1682604577 | 2023-04-27 11:06:22 |
Ubuntu 16.04 ELS | linux-hwe | 4.15.0 | 7.8 | HIGH | Released | 2023-04-04 08:45:34 | |
Ubuntu 18.04 ELS | linux | 4.15.0 | 7.8 | HIGH | Released | 2023-08-31 03:20:01 |
Will not fix: low score