Vulnerability in Kernel: drm/amdgpu/cs
Summary
GSD-2022-1003952: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. Affects Kernel versions < aa25acbe96692e4bf8482311c293f72d8c6034c0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between different components, and ensures the stability and security of the system. The drm/amdgpu/cs module within the Kernel is responsible for handling command submission for AMD GPUs. It processes commands and executes them on the GPU hardware. However, a vulnerability has been discovered in this module that allows commands with 0 chunks, which is considered illegal behavior.
Vulnerability Detail
The vulnerability in drm/amdgpu/cs module allows commands with 0 chunks, which is not intended behavior. This could potentially lead to various security issues, although the exact impact and attack vectors have not been proven yet. Attackers may exploit this vulnerability to execute arbitrary code, escalate privileges, or cause system crashes. The vulnerability has been addressed in Linux Kernel version v4.14.283 by commit aa25acbe96692e4bf8482311c293f72d8c6034c0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the drm/amdgpu/cs module of the Kernel allows commands with 0 chunks, which is considered illegal behavior. It is recommended to update the Kernel to version v4.14.283 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet fully known. However, it could potentially allow attackers to execute arbitrary code, escalate privileges, or cause system crashes.
There is no evidence of this vulnerability being exploited in the wild at the moment.
The vulnerability is present in versions of the Kernel prior to v4.14.283. Updating to this version or later is recommended to mitigate the vulnerability.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel to the fixed version.
You can find more information about this vulnerability in the official Linux Kernel repository and the associated commit aa25acbe96692e4bf8482311c293f72d8c6034c0.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
