Intel i915 graphics driver for Linux (kernel < 6.2.10): MULTI-TENANT ISOLATION: A memory-buffer bounds failure

Impact

MULTI-TENANT ISOLATION: A memory-buffer bounds failure in the i915 kernel driver that an authenticated local user can drive into privilege escalation. i915 is the driver behind Intel integrated and Data Center GPU nodes, and it is reachable from inside any container that has been granted /dev/dri - so this is a container-to-host kernel escape on Intel-GPU nodes.

Who can reach it

Any local user or container with access to the DRM render node. No special hardware access beyond having been scheduled a GPU.

What to do

Update to a Linux kernel with the fix (6.2.10 or later upstream, or your distro's backport) and reboot. i915 cannot be reloaded under running GPU workloads, so drain the node. No BIOS, firmware or microcode component.

References