Related Vulnerabilities: CVE-2020-25639  

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to versions 5.11.3 and 5.10.20 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local privileged user to crash the system.

Severity Low

Remote No

Type Denial of service

Description

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to versions 5.11.3 and 5.10.20 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local privileged user to crash the system.

AVG-1645 linux-hardened 5.10.19.hardened1-1 Low Vulnerable

AVG-1646 linux-zen 5.11.2.zen1-1 5.11.3.zen1-1 Low Testing

AVG-1644 linux 5.11.2.arch4-1 5.11.3.arch4-1 Low Testing

AVG-1647 linux-lts 5.10.19-1 5.10.20-1 Low Fixed

https://bugzilla.redhat.com/show_bug.cgi?id=1876995
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.11.3&id=22be6292f9334b2b6d8e39942c4d65e02859156c
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.20&id=e3fcff9f45aa82dacad26e5828598340d2742f47