Lucene search

K
redhatcveRedhat.comRH:CVE-2023-3220
HistoryJun 21, 2023 - 8:14 a.m.

CVE-2023-3220

2023-06-2108:14:48
redhat.com
access.redhat.com
6
cve-2023-3220
information security
linux kernel
gpu
dpu
local user

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.0%

A NULL pointer dereference flaw was found in the Linux kernel’s drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c code in the dpu_crtc_atomic_check function, which fails because it lacks a check of the return value of kzalloc(). This issue could allow a local user to crash the system.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.0%