Linux Kernel Buffer Object Eviction Vulnerability in Intel GPU Driver

A vulnerability in the Linux kernel's Intel GPU driver can lead to improper eviction of buffer objects within the same virtual machine. This issue arises when an array of virtual machine binds is processed, potentially evicting other buffer objects and causing NULL pointer dereferences later in the binding pipeline. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can cause NULL pointer dereferences, leading to potential crashes or undefined behavior in the system.

Reproduction

The vulnerability can be reproduced by creating an array of VM binds that includes buffer objects within the same virtual machine. This can be done using the Intel GPU driver in the Linux kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed.