{"id":105780,"date":"2022-12-01T21:36:50","date_gmt":"2022-12-01T19:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-drajvere-gpu-intel-dlya-linux"},"modified":"2022-12-01T21:36:50","modified_gmt":"2022-12-01T19:36:50","slug":"uyazvimost-v-drajvere-gpu-intel-dlya-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-drajvere-gpu-intel-dlya-linux","title":{"rendered":"Vulnerability in Intel GPU driver for Linux.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability (CVE-2022-4139) has been found in the Intel GPU driver (i915), which may lead to memory corruption or data leakage from kernel memory. The issue appears starting from Linux kernel 5.4 and affects integrated and discrete Intel GPUs of the 12th generation, including the Tiger Lake, Rocket Lake, Alder Lake, DG1, Raptor Lake, DG2, Arctic Sound, and Meteor Lake families. <\/p>\n
The problem is caused by a logical error, which leads to the GPU driver incorrectly resetting the TLB buffers on certain hardware. In some cases, the TLB reset did not occur at all. An improper reset of the TLB buffers may allow a process using the GPU to access physical memory pages that do not belong to that process, which can be exploited to read foreign data or corrupt memory in a foreign process. It is still unclear whether the vulnerability can be used for targeted memory corruption at desired addresses. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"