Refcount Leak in a6xx_gpu_init in Kernel
Summary
GSD-2022-1002740: drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init. Affects Kernel versions >= 4b565ca5a2cbbbb6345e8789da89c193b6b00e5a, < 06907a374f1b74f8f2fb30720dc6df81331e4fb5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, including memory, processes, and device drivers. The a6xx_gpu_init function in the drm/msm/a6xx module is responsible for initializing the Adreno 6xx series GPU found in certain Qualcomm Snapdragon SoCs. This GPU is commonly used in mobile devices and provides hardware acceleration for graphics-intensive tasks.
Vulnerability Detail
The a6xx_gpu_init function in the drm/msm/a6xx module suffers from a refcount leak vulnerability. This vulnerability allows an attacker to cause a reference count leak, leading to a resource exhaustion condition. By repeatedly triggering this vulnerability, an attacker can consume all available resources, potentially resulting in a denial-of-service (DoS) scenario. The vulnerability was introduced in version v4.19 of the Linux Kernel and has been fixed in version v5.18.3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The refcount leak vulnerability in the a6xx_gpu_init function of the Kernel's drm/msm/a6xx module can lead to a denial-of-service (DoS) scenario by causing resource exhaustion. It is crucial to update the Linux Kernel to version v5.18.3 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial-of-service (DoS) scenario by causing a resource exhaustion condition. It can potentially disrupt the normal operation of the affected system.
Any system running the Linux Kernel version v4.19 to v5.18.2 with the a6xx_gpu_init function enabled is affected by this vulnerability. Systems utilizing the Adreno 6xx series GPU found in certain Qualcomm Snapdragon SoCs are particularly at risk.
At the time of this report, there are no known public exploits specifically targeting this vulnerability. However, it is always advisable to promptly apply security updates to mitigate potential risks.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version v5.18.3 or later.
This vulnerability was discovered through code analysis and review of the Linux Kernel source code. The fix was implemented by the Linux Kernel development team.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
