Critical Vulnerability in Linux Kernel: Encoder Check Bypass in HDCP2 Capability Retrieval
Summary
DEBIAN-CVE-2024-53050: In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in intel_hdcp2_get_capability to avoid null pointer error. Affects linux versions < 6.11.7-1. Fixed in 6.11.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It is known for its stability, performance, and extensive support for various hardware architectures. However, like any complex software, it is susceptible to vulnerabilities that can compromise system security and functionality. This specific vulnerability affects the DRM (Direct Rendering Manager) subsystem, particularly the i915 graphics driver, which handles Intel graphics hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the DRM/i915/HDCP subsystem, specifically in the function responsible for retrieving HDCP2 capabilities. The issue arises from a lack of proper encoder checks in the intel_hdcp2_get_capability function, which can lead to a null pointer dereference. This vulnerability could potentially allow an attacker to exploit the system, leading to crashes or unauthorized access to sensitive graphics content. The vulnerability has been assigned the identifier DEBIAN-CVE-2024-53050 and affects Debian versions 13 and 14.
How To Fix
Minimum fixed version
6.11.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate potential risks.
Conclusion
The vulnerability identified in the Linux kernel's DRM subsystem poses a significant risk due to the potential for system crashes and unauthorized access. Users are strongly advised to update to the patched version to mitigate these risks. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a null pointer dereference in the HDCP2 capability retrieval function of the Linux kernel's DRM subsystem.
The vulnerability affects Debian versions 13 and 14 of the Linux kernel.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. You can also check your application against the vulnerability using the Vulert playground without any signup.
Exploitation of this vulnerability could lead to system crashes or unauthorized access to sensitive graphics content.
Yes, the patched version of the Linux kernel is 6.11.7-1. Users should update their systems to this version.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
