video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - Kernel
Summary
GSD-2022-1003486: video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove(). Affects Kernel versions < 8b3d5bafb188ab32c5684ccc12ddf80be83eeac0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides essential services and functions for the system's operation. It acts as a bridge between the hardware and software, managing resources, handling system calls, and providing various drivers for hardware devices. The pxa3xx-gcu driver is responsible for managing the graphics processing unit (GPU) on PXA3xx-based systems. This vulnerability specifically affects the pxa3xx-gcu driver's resource management during the probe and remove operations.
Vulnerability Detail
The vulnerability in the pxa3xx-gcu driver arises from incorrect resource release in the pxa3xx_gcu_probe/remove functions. This issue can lead to resource leaks and potential memory corruption. An attacker with local access to the affected system may be able to exploit this vulnerability to gain elevated privileges or cause a denial-of-service condition. The vulnerability has been fixed in Linux Kernel version v5.10.122 by commit 8b3d5bafb188ab32c5684ccc12ddf80be83eeac0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in the pxa3xx-gcu driver has the potential to allow an attacker to gain elevated privileges or cause a denial-of-service condition. It is crucial to update the Linux Kernel to version v5.10.122 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker to gain elevated privileges or cause a denial-of-service condition on the affected system.
Any system running the Linux Kernel with the pxa3xx-gcu driver prior to version v5.10.122 is affected by this vulnerability.
No, this vulnerability requires local access to the affected system to be exploited.
There are no known instances of this vulnerability being exploited in the wild.
No, the recommended mitigation is to update the Linux Kernel to version v5.10.122 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
