Vulnerability in Kernel Package: drm/amdgpu/psp
Summary
GSD-2022-1003377: drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init. Affects Kernel versions < a2c87348acebd9bacedfe20cf82341928751ff91. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a crucial component of the Linux operating system, responsible for managing the system's core functions and facilitating communication between hardware and software. The drm/amdgpu/psp module within the Kernel package specifically handles memory allocation for the AMD Graphics Processing Unit (GPU) through the Platform Security Processor (PSP). The PSP is a dedicated microcontroller that assists in secure boot and firmware updates for the GPU. This vulnerability relates to the improper placement of PSP memory allocation within the module's initialization process.
Vulnerability Detail
The vulnerability arises from the incorrect location of PSP memory allocation within the drm/amdgpu/psp module. Specifically, the memory allocation occurs during the hardware initialization phase instead of the software initialization phase. This misplacement can potentially lead to memory corruption or other security issues. While the actual impact and attack plausibility have not been proven, it is essential to address this vulnerability to ensure the integrity and security of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability is fixed in the latest version of the Linux Kernel, there is no specific workaround available. It is advised to update the Kernel package to the recommended version.
Conclusion
In conclusion, the vulnerability in the Kernel package's drm/amdgpu/psp module, related to the misplacement of PSP memory allocation, can be addressed by updating the Linux Kernel to version v5.15.46 or later. This update ensures that the memory allocation occurs during the correct software initialization phase, mitigating potential security risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a critical component of the Linux operating system, responsible for managing core functions and facilitating hardware-software communication.
The drm/amdgpu/psp module is a part of the Kernel package that handles memory allocation for the AMD Graphics Processing Unit (GPU) through the Platform Security Processor (PSP).
The Platform Security Processor (PSP) is a dedicated microcontroller within the GPU that assists in secure boot and firmware updates, enhancing the security of the system.
The vulnerability could lead to memory corruption or other security issues, compromising the integrity and security of the system.
To fix this vulnerability, update the Linux Kernel package to version v5.15.46 or later, which includes the necessary fix for this issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
