Vulnerability in drm/i915 Package: Fix Crash in auto_retire
Summary
GSD-2021-1000191: drm/i915: Fix crash in auto_retire. Affects Kernel versions >= 229007e02d697b0662f85378aae53531b0dfea05, < f7520970d5353cb1fa4d9089a1b23669c5da97fe. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/i915 package is a component of the Linux Kernel that provides support for Intel integrated graphics devices. It is responsible for managing the display and graphics capabilities of Intel processors. The auto_retire function within the package is designed to handle the automatic retirement of GPU contexts. However, a vulnerability has been discovered in this function that can lead to a system crash.
Vulnerability Detail
The vulnerability in the drm/i915 package arises from a flaw in the auto_retire function. When certain conditions are met, such as the presence of a specific GPU context, the function can trigger a crash in the system. This crash can potentially be exploited by an attacker to disrupt the normal operation of the affected system. The vulnerability was introduced in version v5.8 of the Linux Kernel and has been fixed in version v5.12.5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid the vulnerability by disabling the auto_retire feature in the drm/i915 package. This can be achieved by modifying the relevant configuration settings or by applying a patch that disables the feature. However, it is important to note that this workaround may impact the normal functioning of the graphics capabilities provided by the package.
Conclusion
In conclusion, the vulnerability in the drm/i915 package can lead to a system crash when certain conditions are met. It is crucial to update the Linux Kernel to version v5.12.5 or later to mitigate this vulnerability. Alternatively, users can apply the provided workaround, although it may impact the normal functioning of the graphics capabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system crash, potentially causing disruption to the affected system's operation.
No, this vulnerability requires local access to the affected system in order to trigger the crash.
There are no known instances of this vulnerability being exploited in the wild.
Yes, the vulnerability has been fixed in version v5.12.5 of the Linux Kernel.
If updating to the fixed version is not feasible, it is recommended to apply the provided workaround or consult with a security professional for further guidance.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
