Kernel Vulnerability in Linux Package: Encoder Check Bypass in HDCP Capability Retrieval
Summary
DEBIAN-CVE-2024-53051: In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initial... Affects linux versions < 6.11.7-1. Fixed in 6.11.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system processes. It supports a wide range of hardware architectures and is known for its stability and performance. However, vulnerabilities can arise, impacting system security and functionality. This specific issue pertains to the Linux kernel's handling of HDCP (High-bandwidth Digital Content Protection) capabilities, particularly in the drm/i915 subsystem, which manages Intel graphics hardware.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the drm/i915/hdcp module, where the function intel_hdcp_get_capability does not adequately check if the encoder is initialized during hotplug or suspend/resume scenarios. This oversight can lead to a null pointer dereference, potentially causing system crashes or instability. The vulnerability is critical as it affects the reliability of graphics output and could be exploited in scenarios where HDCP is utilized for content protection.
How To Fix
Minimum fixed version
6.11.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
The vulnerability identified in the Linux kernel's drm/i915/hdcp module poses a significant risk due to its potential to cause system instability. Users are strongly advised to update their kernel to the patched version 6.11.7-1 or later to mitigate this risk. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a null pointer dereference in the Intel HDCP capability retrieval process, which can lead to system crashes.
The vulnerability affects all versions prior to 6.11.7-1 in both Debian 13 and Debian 14.
You can check your system's kernel version using the command 'uname -r' in the terminal. If it is below 6.11.7-1, it is vulnerable.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
