Vulnerability in drm: xlnx: zynqmp package - Fix a memset in zynqmp_dp_train()
Summary
GSD-2021-1000266: drm: xlnx: zynqmp: fix a memset in zynqmp_dp_train(). Affects Kernel versions >= d76271d22694e874ed70791702db9252ffe96a4c, < 58a54902ec869b8d051a0a282f252c750c1f33c8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm: xlnx: zynqmp package is a component of the Linux Kernel that provides display support for Xilinx ZynqMP platforms. It includes drivers and functions related to display output and configuration. The zynqmp_dp_train() function is responsible for training the DisplayPort link on these platforms.
Vulnerability Detail
A vulnerability has been identified in the zynqmp_dp_train() function of the drm: xlnx: zynqmp package. The issue originates from a memset operation that is not properly handled. This vulnerability can potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround available for this vulnerability.
Conclusion
In conclusion, a vulnerability has been discovered in the drm: xlnx: zynqmp package that can potentially lead to arbitrary code execution or a denial-of-service condition. It is recommended to update the Linux Kernel to version v5.12.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from arbitrary code execution to a denial-of-service condition. However, the actual impact and attack plausibility have not been proven yet.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
Yes, a fix for this vulnerability is available in Linux Kernel version v5.12.4 or later. It is recommended to update the Kernel to ensure the vulnerability is patched.
No, there are no known workarounds available for this vulnerability.
You can find more information about this vulnerability in the GSD-2021-1000266 entry of the GSD database at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000266.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
