Fix the security vulnerability of Intel Gen12 graphics card. Linux 6.0.11 Linux 5.15.81 Universe 5.10.157

CTOnews.com December 3, Linux core developer Greg Croharman (Greg Kroah-Hartman) today released maintenance updates for Linux 6.0.11, Linux 5.15.81 and Linux 5.10.157. This update alleviates the recent disclosure of i915 driver security issues, from Tigerlake integrated graphics cards to DG2 / Alchemist Arc Intel "Gen12" are affected.

CTOnews.com learned that the CVE-2022-4139 vulnerability discovered earlier this week revolves around GPU TLB flushing security vulnerabilities. In some cases (Gen12 hardware with a specific type of engine), the engine's TLB is not refreshed. A local attacker can exploit this vulnerability to escalate privileges on the problem device to execute arbitrary code.

CTOnews.com learned that the seclists page shows that there are two possible scenarios for this vulnerability depending on whether GPU is running behind an active IOMMU:

1. Physical memory can still be accessed without IOMMU-GPU, which may have been allocated to different processes by the operating system.

two。 There is IOMMU-GPU that can access any memory if a malicious process can create / reuse the necessary IOMMU maps.

"an incorrect TLB refresh problem has been found in the GPU i915 kernel driver of the Linux kernel, which may lead to random memory corruption or data leakage," Red Hat said in an announcement issued on November 30, 2022. This vulnerability may allow local users to crash the system or escalate their privileges on the system.

All Intel set and single Gen12 are affected, including Tiger Lake, Rocket Lake, Alder Lake, DG1, Raptor Lake, DG2, Arctic Sound, Meteor Lake.

The update logs released today for Linux 6.0.11, Linux 5.15.81 and Linux 5.10.157 read: "drm / i915: fix TLB failures in Gen12 video and computing engines".