Vulnerability in drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
Summary
GSD-2022-1003920: drm/vc4: txp: Don't set TXP_VSTART_AT_EOF. Affects Kernel versions >= 008095e065a85a13ffb41b9c98149456267c30b8, < bb59345bb77591d66089cc2d8050ba82ecb41b32. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/vc4 package is a component of the Linux Kernel that provides support for the Broadcom VideoCore IV graphics hardware. It includes the necessary drivers and modules to enable graphics rendering and display capabilities on systems using this hardware. The txp module within drm/vc4 is responsible for handling the transmission of pixel data to the display. It sets various parameters for the transmission process, including the vertical start position. However, a vulnerability has been discovered in the txp module that allows the vertical start position to be set at the end of the frame (TXP_VSTART_AT_EOF). This vulnerability can potentially lead to display artifacts or other issues.
Vulnerability Detail
The vulnerability in the drm/vc4 txp module arises from the incorrect setting of the vertical start position at the end of the frame. By setting TXP_VSTART_AT_EOF, the module may introduce display artifacts or other unintended behavior. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.19.247 by commit bb59345bb77591d66089cc2d8050ba82ecb41b32. The vulnerability was introduced in version v4.19 by commit 008095e065a85a13ffb41b9c98149456267c30b8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the drm/vc4 txp module can lead to display artifacts or other unintended behavior on systems using the Broadcom VideoCore IV graphics hardware. It is crucial to update the Linux Kernel to version v4.19.247 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can include display artifacts or other unintended behavior on systems using the Broadcom VideoCore IV graphics hardware.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, a patch for this vulnerability has been included in Linux Kernel version v4.19.247. It is recommended to update to this version or later to fix the vulnerability.
At the time of this report, there are no known exploits for this vulnerability. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
You can find more information about this vulnerability in the GSD-2022-1003920 entry of the GSD Database maintained by the Cloud Security Alliance. The entry can be accessed at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003920.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
