Double Free Vulnerability in drm/amd/pm Package
Summary
GSD-2022-1003763: drm/amd/pm: fix double free in si_parse_power_table(). Affects Kernel versions < af832028af6f44c6c45645757079c4ed6884ade5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD GPUs. It provides functionality for parsing power tables and managing power states. This package is critical for ensuring efficient power usage and performance of AMD GPUs.
Vulnerability Detail
The double free vulnerability in si_parse_power_table() function of the drm/amd/pm package allows an attacker to free the same memory block twice, leading to memory corruption and potential code execution. This vulnerability can be exploited by an attacker with local access to the system, potentially resulting in privilege escalation or denial of service.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.198 or later. This fix can be obtained by pulling the latest updates from the official Linux Kernel repository. The commit af832028af6f44c6c45645757079c4ed6884ade5 specifically addresses and resolves this double free issue.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix mentioned above to ensure the security and stability of the system.
Conclusion
The double free vulnerability in the drm/amd/pm package of the Linux Kernel can lead to memory corruption and potential code execution. It is recommended to update the Linux Kernel to version v5.4.198 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can be exploited by an attacker with local access to the system, potentially leading to privilege escalation or denial of service.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for any open-source vulnerabilities, including this one.
Yes, a patch is available in the Linux Kernel version v5.4.198. It is recommended to update to this version or a later one to fix the vulnerability.
No, this vulnerability requires local access to the system to be exploited.
There are no known instances of this vulnerability being exploited in the wild. However, it is crucial to apply the fix to mitigate any potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.