CVE-2023-22998

In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

Red Hat Enterprise Linux 6 and 7 are not affected by this flaw as they did not include the virtio_gpu_object_shmem_init function, introduced upstream in commit 2f2aa13 ("drm/virtio: move virtio_gpu_mem_entry initialization to new function").

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.