Kernel Divide Error in Linux Package: Critical Vulnerability in AMD Display Driver
Summary
DEBIAN-CVE-2024-57919: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale calcs dm_get_plane_scale doesn't take into account plane scaled size equal to zero, leading to a ker... Affects linux versions < 6.12.10-1. Fixed in 6.12.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of hardware and is known for its stability and performance. The vulnerability in question affects the AMD display driver within the kernel, specifically related to the handling of plane scaling calculations, which can lead to system crashes under certain conditions.
Vulnerability Detail
In the Linux kernel, a divide error occurs in the AMD display driver due to improper handling of plane scaled sizes. The function 'dm_get_plane_scale' does not account for cases where the destination size is zero, leading to a kernel oops and potential system crashes. This issue originated with the introduction of cursor overlay mode, which uses this function to assess cursor mode changes without validating the plane state first. The vulnerability can result in a kernel panic, affecting system stability and user experience.
How To Fix
Minimum fixed version
6.12.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the AMD display driver features that trigger the divide error until the package is updated. This may involve disabling certain graphical features or using alternative drivers if available.
Conclusion
The divide error vulnerability in the Linux kernel's AMD display driver poses a significant risk to system stability. Users are encouraged to update to the patched version to ensure their systems remain secure. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a divide error in the AMD display driver of the Linux kernel, which can lead to system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. By uploading your manifest file, you can check if your application is affected by this vulnerability.
Failure to address this vulnerability may result in system instability, crashes, and a degraded user experience, especially when using AMD display features.
Yes, the vulnerability is fixed in version 6.12.10-1 and later of the Linux package.
Yes, you can use the Vulert playground to check for vulnerabilities in your application without requiring an account.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
