Vulnerability in drm/mediatek Package: Add vblank register/unregister callback functions
Summary
GSD-2022-1003128: drm/mediatek: Add vblank register/unregister callback functions. Affects Kernel versions >= 9b0704988b151824a51133dc4c921f4273c5d839, < 8a265d9838bc3c63579002d55c2b2c655c4f8f26. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/mediatek package is a component of the Linux Kernel that provides support for display controllers found in MediaTek SoCs. It enables the management and control of display-related operations, including handling of vertical blanking (vblank) events. The vblank events are crucial for synchronizing display operations and preventing visual artifacts. However, a vulnerability has been discovered in the package that allows for potential security risks.
Vulnerability Detail
The vulnerability in the drm/mediatek package involves the lack of proper implementation of vblank register/unregister callback functions. This flaw was introduced in version v5.12 of the Linux Kernel and was fixed in version v5.17.14. Attackers may exploit this vulnerability to execute arbitrary code or perform other malicious activities. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider applying patches or backporting the fix to the affected kernel version. However, it is strongly advised to update to the latest stable version of the Linux Kernel to ensure comprehensive security.
Conclusion
The vulnerability in the drm/mediatek package, related to the lack of vblank register/unregister callback functions, poses potential security risks. It is crucial to update the Linux Kernel to version v5.17.14 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/mediatek package is a component of the Linux Kernel that provides support for display controllers found in MediaTek SoCs.
The vblank register/unregister callback functions are responsible for managing and synchronizing display operations, specifically vertical blanking events.
The vulnerability in the drm/mediatek package could allow attackers to execute arbitrary code or perform other malicious activities.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later, which includes the necessary fix commit.
As a temporary workaround, users can consider applying patches or backporting the fix to the affected kernel version. However, updating to the latest stable version is strongly recommended.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
