VDB

CESS-2022-3424

CESS-2022-3424 PUBLISHED CVSS 7.8 HIGH

A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

  • Mar 6, 2023 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›