CVE-2021-20292 PUBLISHED

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.

EPSS 0.09% · 24.6th percentile

Risk Scores

EPSS Score
0.09%
24.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1050.55~14.04.1, 4.15.0-1067.72~14.04.1, 4.15.0-1066.71~14.04.1
Ubuntu:Pro:FIPS:20.04:LTSlinux-gcp-fips0, 5.4.0-1021.21+fips1
Ubuntu:20.04:LTSlinux-riscv5.4.0-34.38, 5.4.0-36.41, 5.4.0-37.42
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1015.16~18.04.1, 0, 4.18.0-1004.5~18.04.1
Ubuntu:Pro:16.04:LTSlinux-oracle4.15.0-1051.55~16.04.1, 4.15.0-1070.78~16.04.1, 4.15.0-1069.77~16.04.1
Ubuntu:Pro:FIPS:20.04:LTSlinux-azure-fips0, 5.4.0-1022.22+fips1
Ubuntu:Pro:FIPS:20.04:LTSlinux-aws-fips0, 5.4.0-1021.21+fips2
Ubuntu:18.04:LTSlinux-oracle-5.05.0.0-1010.15~18.04.1, 0, 5.0.0-1007.12~18.04.1
Ubuntu:18.04:LTSlinux-gcp-5.45.4.0-1019.19~18.04.2, 0, 5.4.0-1021.21~18.04.1
Ubuntu:Pro:FIPS:18.04:LTSlinux-azure-fips0, 4.15.0-1002.2
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1010.11~18.04.1, 5.3.0-1020.21~18.04.1, 5.3.0-1019.20~18.04.1
Ubuntu:18.04:LTSlinux-aws4.15.0-1096.103, 4.15.0-1095.102, 4.15.0-1094.101
Ubuntu:Pro:16.04:LTSlinux-kvm4.4.0-1079.86, 4.4.0-1102.111, 4.4.0-1100.109
Ubuntu:20.04:LTSlinux-azure5.4.0-1020.20, 5.4.0-1022.22, 5.4.0-1023.23
Ubuntu:Pro:16.04:LTSlinux-aws-hwe4.15.0-1088.93~16.04.1, 4.15.0-1090.95~16.04.1, 4.15.0-1091.96~16.04.1
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2000.4, 4.15.0-2042.44, 4.15.0-2041.43
Ubuntu:18.04:LTSlinux-azure4.15.0-1032.33, 4.15.0-1018.18, 4.15.0-1019.19
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1027.29~18.04.1, 5.3.0-1030.32~18.04.1, 5.3.0-1028.30~18.04.1
Ubuntu:Pro:16.04:LTSlinux-gcp4.15.0-1052.56, 4.15.0-1050.53, 4.15.0-1049.52
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1083.91, 4.15.0-1091.100, 4.15.0-1090.99

…and 49 more

Timeline

References

Open in Interactive Console →