System Hang Vulnerability in Linux Kernel: drm/amd/display GPINT Command Execution
Summary
DEBIAN-CVE-2023-52624: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before executing GPINT commands [Why] DMCUB can be in idle when we attempt to interface with the HW through the GPINT mailbo... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used in various environments, from servers to embedded systems. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability specifically affects the drm/amd/display subsystem, which handles display-related functionalities for AMD graphics hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/amd/display subsystem where the DMCUB (Display Microcontroller Unit Block) can remain idle when interfacing with hardware through the GPINT (General Purpose Interrupt) mailbox. This can lead to a system hang, causing the operating system to become unresponsive. The issue arises from the lack of proper wake-up calls to the DMCUB before executing GPINT commands, which is crucial for ensuring that the hardware is ready for communication. The vulnerability is classified as critical due to its potential to disrupt system operations and affect user experience.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned to mitigate this vulnerability without applying the patch. It is recommended to update the kernel as soon as possible to avoid potential system hangs.
Conclusion
The vulnerability in the Linux kernel related to the drm/amd/display subsystem poses a significant risk of system hangs due to improper handling of the DMCUB during GPINT command execution. It is essential for users to update their kernel to the fixed version 6.7.7-1 to ensure system stability and security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause the system to hang, leading to unresponsiveness and potential data loss.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux kernel is 6.7.7-1. Users should update to this version to resolve the issue.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate the risk of system hangs.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52624.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
