Vulnerability in drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
Summary
GSD-2022-1002808: drm/vc4: txp: Don't set TXP_VSTART_AT_EOF. Affects Kernel versions >= 008095e065a85a13ffb41b9c98149456267c30b8, < 819e5fd43a30ca49f7bf2fc26dbebd37ebc1c6e7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/vc4 package is a component of the Linux Kernel that provides support for the Broadcom VideoCore IV graphics hardware. It includes the necessary drivers and functionality to enable graphics rendering and display capabilities on systems utilizing this hardware. The txp module within the package is responsible for handling the transmission of pixel data to the display. This vulnerability affects versions of the Linux Kernel from v4.19 to v5.18.2.
Vulnerability Detail
The vulnerability in the drm/vc4: txp module involves the improper setting of the TXP_VSTART_AT_EOF flag. This flag controls the vertical synchronization of pixel data transmission to the display. By incorrectly setting this flag, an attacker may be able to manipulate the timing of pixel data transmission, potentially leading to visual artifacts, screen tearing, or other display-related issues. While the impact and attack plausibility have not been proven, it is important to address this vulnerability to ensure the proper functioning of graphics rendering and display on systems utilizing the Broadcom VideoCore IV hardware.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in drm/vc4: txp module of the Linux Kernel can potentially lead to display-related issues on systems utilizing the Broadcom VideoCore IV graphics hardware. It is recommended to update the Linux Kernel to version v5.18.3 or later to mitigate this vulnerability. Users can obtain the updated kernel from the official Linux Kernel repository. For more information and support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability may include visual artifacts, screen tearing, or other display-related issues on systems utilizing the Broadcom VideoCore IV graphics hardware.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will provide real-time alerts for open-source vulnerabilities, including this one.
At the time of this report, no known exploits for this vulnerability have been identified. However, it is still important to address the vulnerability to ensure the proper functioning of graphics rendering and display on affected systems.
For more details about this vulnerability, you can refer to the source JSON file at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002808.json.
For further support on vulnerability remediation, you can contact info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
