Vulnerability in drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init
Summary
GSD-2022-1003093: drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init. Affects Kernel versions < 1fa992f61fa8e1ce65373251ebef1078f3d98410. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amdgpu/psp package is a component of the Linux Kernel that handles the communication between the AMD GPU driver and the AMD Platform Security Processor (PSP). The PSP is responsible for managing security-related tasks on AMD GPUs. The package initializes the PSP and allocates memory for its use during system initialization.
Vulnerability Detail
The vulnerability in drm/amdgpu/psp involves the improper allocation of PSP memory. Specifically, the memory allocation is performed during the hardware initialization phase (hw_init) instead of the software initialization phase (sw_init). This can lead to potential security issues as the PSP memory may not be properly secured during critical stages of system boot-up. An attacker could potentially exploit this vulnerability to gain unauthorized access or execute arbitrary code on the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in drm/amdgpu/psp involving the improper allocation of PSP memory can potentially lead to unauthorized access or execution of arbitrary code. It is recommended to update to Linux Kernel version v5.17.14 or a later version to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/amdgpu/psp package is a component of the Linux Kernel that handles the communication between the AMD GPU driver and the AMD Platform Security Processor (PSP).
This vulnerability can potentially allow an attacker to gain unauthorized access or execute arbitrary code on the system.
To fix this vulnerability, it is recommended to update to Linux Kernel version v5.17.14 or a later version.
No specific workaround has been mentioned for this vulnerability.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
