Description
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access. Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses. Additionally, the calculations have been rewritten in a clearer and more understandable form. [Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417)
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c58305af1835095ddc25ee6f548ac05915e66ac5 to < 3e06073d24807f04b4694108a8474decb7b99e60affectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < a256d019eaf044864c7e50312f0a65b323c24f39affectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < 50111a8098fb9ade621eeff82228a997d42732abaffectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < 911f8055f175c82775d0fd8cedcd0b75413f4ba7affectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < e8a68aa842d3f8dd04a46b9d632e5f67fde1da9baffectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < 4b09513ce93b3dcb590baaaff2ce96f2d098312daffectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < ead9289a51ea82eb5b27029fcf4c34b2dd60cf06affectedc58305af1835095ddc25ee6f548ac05915e66ac5 to < 8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3affected
Linux Linux
Default version status: affected
4.9affected0 to < 4.9unaffected4.19.320 to ≤ 4.19.*unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.106 to ≤ 6.1.*unaffected6.6.46 to ≤ 6.6.*unaffected6.10.5 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3e06073d24807f04b4694108a8474decb7b99e60 ↗
- https://git.kernel.org/stable/c/a256d019eaf044864c7e50312f0a65b323c24f39 ↗
- https://git.kernel.org/stable/c/50111a8098fb9ade621eeff82228a997d42732ab ↗
- https://git.kernel.org/stable/c/911f8055f175c82775d0fd8cedcd0b75413f4ba7 ↗
- https://git.kernel.org/stable/c/e8a68aa842d3f8dd04a46b9d632e5f67fde1da9b ↗
- https://git.kernel.org/stable/c/4b09513ce93b3dcb590baaaff2ce96f2d098312d ↗
- https://git.kernel.org/stable/c/ead9289a51ea82eb5b27029fcf4c34b2dd60cf06 ↗
- https://git.kernel.org/stable/c/8bdd9ef7e9b1b2a73e394712b72b22055e0e26c3 ↗
- https://project-zero.issues.chromium.org/issues/42451707 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗