CVE-2020-7053: Use After Free
A use-after-free flaw was found in the Linux kernel’s GPU driver functionality when destroying GEM context. A local user could use this flaw to crash the system or potentially escalate their privileges.
Other sources
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in drivers/gpu/drm/i915/i915gemcontext.c.
In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c. This is related to i915gemcontextdestroyioctl in drivers/gpu/drm/i915/i915gemcontext.c.
Reference: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1859522
Upstream commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7dc40713618c884bf07c030d1ab1f47a9dc1f310
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.21.1.rt56.1158.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.21.1.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-193.rt13.51.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-193.el8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.2 - Configuration
If a dedicated graphics card is present and i915 is not being used, blacklist the i915 kernel module to prevent it from loading automatically.
Linux kernel i915 GPU driver module module loading = disabled
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-7053?
CVE-2020-7053 has a high severity rating due to its potential for privilege escalation and system crashes.
How do I fix CVE-2020-7053?
To fix CVE-2020-7053, update your kernel packages to the latest versions as specified in the remediation guidance.
What versions of the Linux kernel are affected by CVE-2020-7053?
CVE-2020-7053 affects Linux kernel versions from 4.14 to 4.19.x and some 5.x versions up to but not including 5.3.
Who is affected by CVE-2020-7053?
Any local user on systems using the vulnerable versions of the Linux kernel could potentially exploit CVE-2020-7053.
What kind of vulnerability is CVE-2020-7053?
CVE-2020-7053 is classified as a use-after-free vulnerability in the Linux kernel's GPU driver functionality.