Linux Kernel up to 6.0.2 virtgpu_object.c virtio_gpu_object_shmem_init drm_gem_shmem_get_sg_table return value

Summaryinfo

A vulnerability has been found in Linux Kernel up to 6.0.2 and classified as problematic. This affects the function virtio_gpu_object_shmem_init of the file drivers/gpu/drm/virtio/virtgpu_object.c. Performing a manipulation of the argument drm_gem_shmem_get_sg_table results in return value. This vulnerability is known as CVE-2023-22998. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.0.2 (Operating System). This affects the function virtio_gpu_object_shmem_init of the file drivers/gpu/drm/virtio/virtgpu_object.c. The manipulation of the argument drm_gem_shmem_get_sg_table with an unknown input leads to a return value vulnerability. CWE is classifying the issue as CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions. The impact remains unknown. The summary by CVE is:

In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

The weakness was published 03/01/2023 as c24968734abfed81c8f93dc5f44a7b7a9aecadfa. It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2023-22998 since 01/11/2023. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 236642 (Alibaba Cloud Linux 3 : 0042: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0042)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 6.0.3 eliminates this vulnerability. The upgrade is hosted for download at cdn.kernel.org. Applying the patch c24968734abfed81c8f93dc5f44a7b7a9aecadfa is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (236642) and EUVD (EUVD-2023-27098). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 6.0.0
• 6.0.1
• 6.0.2

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion