Threats tagged 'ghsa-vvxc-w7f5-6422'

A high-severity vulnerability in the Linux kernel's ivpu driver was resolved. The issue involved a page fault caused by improper handling of buffer objects (BO) in the ivpu_gem_create_object() function. Specifically, when drm_gem_shmem_create() failed, the BO was not fully created, and the cleanup callback ivpu_gem_bo_free() was not invoked, leaving a deleted BO on the vdev->bo_list. This could lead to memory corruption and potentially compromise confidentiality, integrity, and availability.