Vulnerability in Kernel Package: drm/plane
Summary
GSD-2022-1003622: drm/plane: Move range check for format_count earlier. Affects Kernel versions < b5cd108143513e4498027b96ec4710702d186f11. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It includes various subsystems, such as the drm/plane subsystem, which handles the display plane functionality. The drm/plane subsystem is responsible for managing the placement and composition of graphical content on the screen. This vulnerability specifically affects the range check for the format_count parameter in the drm/plane subsystem.
Vulnerability Detail
The vulnerability in the drm/plane subsystem arises from a range check issue with the format_count parameter. By moving the range check earlier in the code, the vulnerability is mitigated. However, if left unpatched, an attacker could potentially exploit this vulnerability to execute arbitrary code or trigger a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the Kernel package's drm/plane subsystem can be mitigated by updating to version v5.10.121 or later. It is crucial to promptly apply this fix to prevent potential exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if any open-source vulnerabilities, including this one, are detected.
No known exploits for this vulnerability have been reported at this time.
The recommended mitigation is to update the Linux Kernel package to version v5.10.121 or later, which includes the fix for this vulnerability.
You can find more information about this vulnerability in the GSD-2022-1003622 JSON report available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003622.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
