Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been addressed in the Linux kernel's handling of Graphics Execution Manager (GEM) objects within the Direct Rendering Manager (DRM) subsystem. The issue arose because the reservation lock for GEM objects was not properly managed during 'madvise' operations, leading to potential errors in the Kunit test environment. The vulnerability affects several versions of the Linux kernel.
The vulnerability could lead to improper management of memory advice operations for GEM objects, potentially causing synchronization issues or test failures.
The vulnerability can be reproduced by running Kunit tests that utilize the 'drm_gem_shmem_madvise_locked' function. This will trigger a warning indicating that the reservation lock was not properly handled, demonstrating the issue.
The vulnerability has been fixed by modifying the 'drm_gem_shmem_madvise' function to correctly acquire and release the reservation lock around 'madvise' operations. Users can apply the latest patches available in the Linux kernel stable tree to address this issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.