248 lines
12 KiB
JSON
248 lines
12 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-93183",
|
|
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "Linux",
|
|
"dateReserved": "2026-09-17T16:02:15.091Z",
|
|
"datePublished": "2026-09-17T16:12:10.072Z",
|
|
"dateUpdated": "2026-10-19T09:06:56.138Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"shortName": "Linux",
|
|
"dateUpdated": "2026-10-19T09:06:56.138Z"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/lima: call drm_mm_init() with a valid allocation range\n\nlima_vm_create() is currently run before va_start and va_end are set up,\nmeaning they are both 0. lima_vm_create() runs drm_mm_init() with them\nas arguments for the allocator, and if DRM_DEBUG_MM is enabled the\nDRM_MM_BUG_ON check in drm_mm_init then fires, as seen here on\nexynos4412-odroid-u2:\n\n[ 1.736297] ------------[ cut here ]------------\n[ 1.740370] kernel BUG at drivers/gpu/drm/drm_mm.c:931!\n[ 1.745574] Internal error: Oops - BUG: 0 [#1] SMP ARM\n[ 1.750697] Modules linked in:\n[ 1.753734] CPU: 0 UID: 0 PID: 41 Comm: kworker/u16:1 Not tainted 7.0.10-postmarketos-exynos4 #11 PREEMPT\n[ 1.763372] Hardware name: Samsung Exynos (Flattened Device Tree)\n[ 1.769446] Workqueue: events_unbound deferred_probe_work_func\n[ 1.775261] PC is at drm_mm_init+0x9c/0xa4\n[ 1.779339] LR is at lima_vm_create+0x144/0x17c\n[ ... ]\n\nFix the issue by moving the lima_vm_create() call after va_start and\nva_end are set up."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "unaffected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"drivers/gpu/drm/lima/lima_device.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "af1f276d50c9d7ebcd25770f358ca503a89d96d7",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "fd6bc5f1d6b54047b06b82bab25a7e21e4b1c95a",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "ad4e908096dff97646f77b04e2e2825225e215f7",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "788917ba77f5d69bd368c1d176ecceda346a2951",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "79a3331ee436c8b1454f897d539606c9b5ebdf9f",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "e2a7cee341986cb5b544a8286edc7fb0494c592e",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "e0773ad25a34a49aece176721c466cf214e02222",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "a1d2a6339961efc078208dc3b2f006e9e9a8e119",
|
|
"lessThan": "3b3bce4a692ac60d9f4a341e6b597dd1fd0a28f9",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "affected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"drivers/gpu/drm/lima/lima_device.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "5.2",
|
|
"status": "affected"
|
|
},
|
|
{
|
|
"version": "0",
|
|
"lessThan": "5.2",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.10.270",
|
|
"lessThanOrEqual": "5.10.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.15.221",
|
|
"lessThanOrEqual": "5.15.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.1.188",
|
|
"lessThanOrEqual": "6.1.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.6.157",
|
|
"lessThanOrEqual": "6.6.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.12.110",
|
|
"lessThanOrEqual": "6.12.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.18.52",
|
|
"lessThanOrEqual": "6.18.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "7.2.6",
|
|
"lessThanOrEqual": "7.2.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "7.3",
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"versionType": "original_commit_for_fix"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"cpeApplicability": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "5.10.270"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "5.15.221"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "6.1.188"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "6.6.157"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "6.12.110"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "6.18.52"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "7.2.6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.2",
|
|
"versionEndExcluding": "7.3"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/af1f276d50c9d7ebcd25770f358ca503a89d96d7"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/fd6bc5f1d6b54047b06b82bab25a7e21e4b1c95a"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/ad4e908096dff97646f77b04e2e2825225e215f7"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/788917ba77f5d69bd368c1d176ecceda346a2951"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/79a3331ee436c8b1454f897d539606c9b5ebdf9f"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/e2a7cee341986cb5b544a8286edc7fb0494c592e"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/e0773ad25a34a49aece176721c466cf214e02222"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/3b3bce4a692ac60d9f4a341e6b597dd1fd0a28f9"
|
|
}
|
|
],
|
|
"title": "drm/lima: call drm_mm_init() with a valid allocation range",
|
|
"x_generator": {
|
|
"engine": "bippy-1.2.0"
|
|
}
|
|
}
|
|
}
|
|
} |