Vulnerability in Kernel: drm/plane - Move range check for format_count earlier
Summary
GSD-2022-1003111: drm/plane: Move range check for format_count earlier. Affects Kernel versions < 787163d19bc3cdc6ca4b96223f62208534d1cf6b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The drm/plane module within the Kernel is responsible for managing display planes and their associated properties, including pixel formats. Display planes are used to compose and display graphical content on screens. This vulnerability in the drm/plane module allows for a potential security breach.
Vulnerability Detail
The vulnerability in the drm/plane module arises from a range check for format_count being performed too late in the code execution flow. This could lead to a buffer overflow or other memory-related issues if an attacker provides a malicious value for format_count. By exploiting this vulnerability, an attacker may be able to execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the Kernel to the fixed version as soon as possible.
Conclusion
The vulnerability in the drm/plane module of the Kernel poses a potential security risk. It is crucial to update the Kernel to the fixed version to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a core component of the Linux operating system that manages system resources and facilitates communication between hardware and software.
The drm/plane module within the Kernel is responsible for managing display planes and their associated properties, including pixel formats.
A display plane is used to compose and display graphical content on screens.
A buffer overflow occurs when a program writes data beyond the boundaries of a buffer, potentially overwriting adjacent memory and leading to unexpected behavior or security vulnerabilities.
By providing a malicious value for format_count, an attacker may be able to exploit the vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
