Double Free Vulnerability in drm/amd/pm
Summary
GSD-2022-1003144: drm/amd/pm: fix double free in si_parse_power_table(). Affects Kernel versions < fd2eff8b9dcbe469c3b7bbbc7083ab5ed94de07b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD graphics cards. It is responsible for parsing and managing power tables for these devices. The vulnerability in question, si_parse_power_table(), is a function within this package that is susceptible to a double free vulnerability.
Vulnerability Detail
The double free vulnerability in si_parse_power_table() allows an attacker to free the same memory location twice, potentially leading to memory corruption and subsequent exploitation. This vulnerability could be exploited by an attacker with local access to the system, allowing them to execute arbitrary code or crash the system. The vulnerability was fixed in Linux Kernel version v5.17.14 by commit fd2eff8b9dcbe469c3b7bbbc7083ab5ed94de07b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the patched version to mitigate the risk.
Conclusion
The double free vulnerability in si_parse_power_table() in the drm/amd/pm package of the Linux Kernel has the potential to be exploited by an attacker with local access to the system. It is crucial to update the Linux Kernel to version v5.17.14 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could allow an attacker to execute arbitrary code or crash the system, potentially leading to a denial of service or privilege escalation.
Any system running the affected version of the Linux Kernel with AMD graphics cards is potentially vulnerable.
No, this vulnerability requires local access to the system to be exploited.
There are no known instances of this vulnerability being exploited in the wild at this time.
No, there is no CVE assigned to this vulnerability at this time.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
