Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Fix phys BO pread/pwrite with offset
sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used.
Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport.
(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)
Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , Debian 11 ELS , TuxCare 9.6 ESU
- Affected packages:
- kernel @ 5.14.0 (+3 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 10 | Released |
60 kernels
|
| AlmaLinux 9 | Released |
126 kernels
|
| Amazon Linux 2023 | Planned | — |
| Debian 11 | Released |
43 kernels
|
| Debian 11 cloud | Released |
23 kernels
|
| Debian 12 | Released |
40 kernels
|
| Oracle Linux 10 | Released |
46 kernels
|
| Oracle Linux 9 | Released |
125 kernels
|
| RHEL 10 | Released |
60 kernels
|
| RHEL 9 | Released |
124 kernels
|
| Rocky Linux 10 | Released |
43 kernels
|
| Rocky Linux 9 | Released |
101 kernels
|