Vulnerability in drm/msm Package: Don't Free the IRQ if Not Requested
Summary
GSD-2022-1003085: drm/msm: don't free the IRQ if it was not requested. Affects Kernel versions >= f026e431cf861197dc03217d1920b38b80b31dd9, < b288ec4439c1dad304c1862bf6b0be78d9b1b2b2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/msm package is a component of the Linux Kernel that provides support for graphics rendering on Qualcomm Adreno GPUs. It is responsible for managing the display and rendering capabilities of these GPUs. The package includes various drivers and modules that enable communication between the GPU and the operating system. One of the critical functionalities of the drm/msm package is handling interrupts, which are used to notify the system of important events or changes in the GPU's state.
Vulnerability Detail
The vulnerability identified in the drm/msm package involves the improper handling of interrupts. Specifically, the package erroneously frees the interrupt request (IRQ) even if it was not initially requested. This flaw can lead to various security issues and system instability. An attacker could potentially exploit this vulnerability to disrupt the GPU's operation, cause denial of service (DoS) conditions, or execute arbitrary code with elevated privileges. The vulnerability was introduced in version v5.15 of the Linux Kernel and was fixed in version v5.17.14.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected functionality by modifying the relevant configuration files or kernel parameters. However, this workaround may result in limited or degraded GPU performance. It is recommended to consult the official documentation or seek assistance from the Linux Kernel community for specific instructions on implementing this workaround.
Conclusion
In conclusion, the vulnerability in the drm/msm package of the Linux Kernel could lead to various security issues and system instability. It is crucial to update the Linux Kernel to version v5.17.14 or later to mitigate this vulnerability. Users can also utilize tools like Vulert Playground to check if their systems are affected. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially lead to system instability, denial of service (DoS) conditions, and unauthorized code execution with elevated privileges.
You can use tools like Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert Playground allows you to analyze your application's manifest file, such as package-lock.json, and provides real-time alerts for open-source vulnerabilities.
Yes, a temporary workaround involves disabling the affected functionality by modifying configuration files or kernel parameters. However, this may result in reduced GPU performance.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.14 or later. This update includes the necessary patch to address the issue.
You can obtain the updated Linux Kernel from the official Linux Kernel repository. Ensure compatibility with your system's hardware and software dependencies before performing the update.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
