CVE-2023-3355: Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msmgemsubmit.c code in the submitlookupcmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the system.
Other sources
An issue was discovered in the Linux kernel through 6.1-rc8. submitlookupcmds in drivers/gpu/drm/msm/msmgemsubmit.c lacks check of the return value of kmalloc() and will cause the NULL Pointer Dereference.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d839f0811a31322c087a859c2b181e2383daa7be
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1
Event History
Frequently Asked Questions
Who can exploit this issue?
A local user can exploit the flaw. The CVSS vector indicates that low privileges are required and no user interaction is needed.
What is the impact of successful exploitation?
Successful exploitation can crash the system, resulting in a denial of service. The provided CVSS vector indicates availability impact only, with no stated confidentiality or integrity impact.
Which systems are in scope?
The issue affects the Linux kernel code in drivers/gpu/drm/msm/msm_gem_submit.c and was discovered in Linux kernel versions through 6.1-rc8. The listed software includes Linux Linux kernel and redhat/kernel.