Description
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validate_init() On the ttm_bo_reserve() failure and "vma not found" error paths, the loop breaks without adding the looked-up object to any validate list, so the reference taken by drm_gem_object_lookup() is never released; validate_fini() only walks the spliced lists. Drop the reference before breaking out on both paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
19ca10d82e33bcfe92412c461fc3534ec1e14747 to < af2f48c12365866abb327d75c21a13bbde84719caffected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 3c80e069470cf73c357c9edb5ec5fba20e6f6a98affected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 957619120c26d6727efd18504e6b488673d3900aaffected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 74485cdc343060fce08f8f3990da524d783e43a7affected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 8281930fc194ad448aaa5de8dd47fb6fb1cba327affected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 030e93fc91d55d9487b3b85fc0712bb795d77834affected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 9e13c398a23445baf38f0a59033dd9872a2bfe20affected19ca10d82e33bcfe92412c461fc3534ec1e14747 to < 5ea72f7b7139b123713a7983448f910bc4514d9eaffectedbcc16811023394a5e61a20c107f1fa560a28b7c1affected4.17.12 to < 4.18affected
Linux Linux
Default version status: affected
4.18affected0 to < 4.18unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.55 to ≤ 6.18.*unaffected7.2.9 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/af2f48c12365866abb327d75c21a13bbde84719c ↗
- https://git.kernel.org/stable/c/3c80e069470cf73c357c9edb5ec5fba20e6f6a98 ↗
- https://git.kernel.org/stable/c/957619120c26d6727efd18504e6b488673d3900a ↗
- https://git.kernel.org/stable/c/74485cdc343060fce08f8f3990da524d783e43a7 ↗
- https://git.kernel.org/stable/c/8281930fc194ad448aaa5de8dd47fb6fb1cba327 ↗
- https://git.kernel.org/stable/c/030e93fc91d55d9487b3b85fc0712bb795d77834 ↗
- https://git.kernel.org/stable/c/9e13c398a23445baf38f0a59033dd9872a2bfe20 ↗
- https://git.kernel.org/stable/c/5ea72f7b7139b123713a7983448f910bc4514d9e ↗