CVE-2021-20292CWE-416

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM…

published May 28, 2021

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00853 · 57.8th percentile
Weakness
CWE-416 · Use After Free
Published
2021-05-28T10:42Z
EPSS history
Timeline
  • 28 MAY 10:42Z
    There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM…
    cvelistv5