CVE-2023-52485: Vulnerability in linux-libc-dev - kernel: drm/amd/display: Wake DMCUB before sending a command cause deadlock
Summary
CVE-2023-52485: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command [Why] We can hang in place trying to send commands when the DMCUB isn't powered on. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the Linux kernel. It is used by developers to compile and build applications that interact with the kernel. The package is essential for developing and running Linux-based software. However, a vulnerability has been discovered in the package that can lead to a deadlock in the kernel when sending a command to the DMCUB (Display Microcontroller Unit Block) without waking it up first.
Vulnerability Detail
The vulnerability arises from the fact that the kernel can hang when attempting to send commands to the DMCUB when it is not powered on. This can result in a deadlock situation, causing the system to become unresponsive. To address this issue, the Linux kernel developers have implemented changes in the drm/amd/display module. These changes ensure that the DMCUB is woken up before sending any commands, preventing the deadlock from occurring.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to update the linux-libc-dev package to the latest version as soon as possible.
Conclusion
The vulnerability in linux-libc-dev can lead to a deadlock in the kernel when sending commands to the DMCUB without waking it up first. To mitigate this issue, users should update their linux-libc-dev package to the latest version. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the Linux kernel. It is used by developers to compile and build applications that interact with the kernel.
The vulnerability can lead to a deadlock in the kernel, causing the system to become unresponsive.
To fix this vulnerability, users should update their linux-libc-dev package to version 6.1.90-1 or later.
There is no specific workaround mentioned for this vulnerability. Users are advised to update the linux-libc-dev package to the latest version as soon as possible.
More information about this vulnerability can be found in the references provided.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
