Vulnerability in drm/i915 Package: Fix -Wstringop-overflow Warning
Summary
GSD-2022-1003925: drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency(). Affects Kernel versions < fa6d61db00701167255f01174a382cdf6193b2b1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The drm/i915 package is a component of the Linux Kernel that provides support for Intel integrated graphics devices. It includes the necessary drivers and modules for managing display and graphics functionality on systems with Intel GPUs. The package is widely used in Linux-based operating systems and is crucial for proper graphics rendering and performance on Intel hardware.
Vulnerability Detail
The vulnerability in the drm/i915 package is related to a -Wstringop-overflow warning in the call to intel_read_wm_latency(). While the actual impact and attack plausibility have not been proven, this warning indicates a potential buffer overflow issue that could be exploited by an attacker. If successfully exploited, an attacker may be able to execute arbitrary code or cause a denial-of-service condition on the affected system. The vulnerability has been assigned the ID GSD-2022-1003925 and is fixed in Linux Kernel version v4.19.246 by commit fa6d61db00701167255f01174a382cdf6193b2b1.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the drm/i915 package highlights a potential buffer overflow issue that could be exploited by attackers. It is crucial to update the Linux Kernel to version v4.19.246 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, if successfully exploited, it could lead to arbitrary code execution or a denial-of-service condition.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
Yes, a patch is available in Linux Kernel version v4.19.246. It is recommended to update to this version or a later one to fix the vulnerability.
No specific temporary measures have been mentioned for this vulnerability. It is best to update to the fixed version of the Linux Kernel as soon as possible.
You can find more information about this vulnerability in the GSD-2022-1003925 JSON file available on the GitHub repository of the Cloud Security Alliance's GSD Database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003925.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
