Null Pointer Dereferences in drm/msm Package
Summary
GSD-2022-1002787: drm/msm: Fix null pointer dereferences without iommu. Affects Kernel versions >= bc2112583a0b473f5c4ba87c00da84abd5d0b3fd, < f09937e80f9bc792965476c9a528f26c8fdc9179. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/msm package is a component of the Linux Kernel that provides support for graphics rendering on Qualcomm Adreno GPUs. It is responsible for managing display controllers, handling memory management, and implementing various graphics-related functionalities. The package is widely used in devices running on the Linux operating system, including smartphones, tablets, and embedded systems. However, a vulnerability has been discovered in the drm/msm package that can lead to null pointer dereferences when the system does not have an input-output memory management unit (IOMMU) enabled.
Vulnerability Detail
The vulnerability in the drm/msm package arises from null pointer dereferences that occur when the system does not have an IOMMU enabled. An attacker could exploit this vulnerability by crafting malicious input that triggers the null pointer dereference, leading to a system crash or potential code execution. The impact of this vulnerability depends on the context in which the drm/msm package is used. If the affected system is running in a privileged context, such as a root user or kernel mode, the attacker may be able to gain elevated privileges or execute arbitrary code. However, the actual impact and attack plausibility have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the kernel is not immediately feasible, a possible workaround is to enable the IOMMU on the system. Enabling the IOMMU provides protection against null pointer dereferences in the drm/msm package. The specific steps to enable the IOMMU may vary depending on the system configuration and hardware. It is recommended to consult the system documentation or seek assistance from the hardware manufacturer or Linux community for guidance on enabling the IOMMU.
Conclusion
The vulnerability in the drm/msm package can lead to null pointer dereferences without an IOMMU, potentially resulting in system crashes or code execution. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.18.3 or later. Enabling the IOMMU on the system can also serve as a temporary workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/msm package is a component of the Linux Kernel that provides support for graphics rendering on Qualcomm Adreno GPUs.
An IOMMU (Input-Output Memory Management Unit) is a hardware component that provides memory address translation for input and output devices. It helps protect against certain types of attacks, such as DMA (Direct Memory Access) attacks.
Null pointer dereferences occur when a program attempts to access or manipulate memory using a null pointer, which does not point to a valid memory location. This can lead to crashes, unexpected behavior, or potential security vulnerabilities.
An attacker can exploit this vulnerability by crafting malicious input that triggers null pointer dereferences in the drm/msm package. This can potentially lead to system crashes or code execution, depending on the context in which the package is used.
Yes, the vulnerability has been fixed in Linux Kernel version v5.18.3. It is recommended to update the kernel to this version or later to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
