Memory Leak Vulnerability in drm/amd/pm Package
Summary
GSD-2022-1003249: drm/amd/pm: fix a potential gpu_metrics_table memory leak. Affects Kernel versions >= 95868b85764aff2dcbf78d3054076df75446ad15, < 257b3bb16634fd936129fe2f57a91594a75b8751. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD graphics devices. It provides functionality for controlling the power states of GPUs and managing performance metrics. The package is critical for proper functioning and optimization of AMD graphics hardware.
Vulnerability Detail
The identified vulnerability in the drm/amd/pm package is related to a potential memory leak in the gpu_metrics_table. This memory leak can occur under certain conditions, leading to the consumption of system resources and potential performance degradation. While the impact and attack plausibility have not been proven, it is crucial to address this vulnerability to ensure system stability and prevent resource exhaustion.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel.
Conclusion
The memory leak vulnerability in the drm/amd/pm package can potentially lead to resource consumption and performance degradation. It is crucial to update the Linux Kernel to version v5.15.11 or later to address this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can potentially result in memory leaks, leading to resource consumption and performance degradation. However, the actual impact and attack plausibility have not been proven.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert provides real-time monitoring and alerts for open-source vulnerabilities without requiring access to the code or installation.
No known exploit has been reported for this vulnerability at the time of this report. However, it is still important to apply the recommended fix to mitigate any potential risks.
It is not recommended to manually patch the vulnerability without updating the entire Linux Kernel. The fix for this vulnerability is included in the updated kernel version v5.15.11. Applying the complete kernel update ensures that all necessary changes and improvements are implemented.
You can find more information about this vulnerability, including the specific commits addressing the issue, in the vulnerability database entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003249.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
