Vulnerability in drm/tegra: sor
Summary
GSD-2021-1000970: drm/tegra: sor: Do not leak runtime PM reference. Affects Kernel versions < 570b3e4020f2aa7ab6908042e7f3a41ab24ce261. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/tegra package is a component of the Linux Kernel ecosystem. It provides support for the display subsystem on NVIDIA Tegra SoCs. The sor module within this package handles the runtime power management (PM) of the display subsystem. Runtime PM is responsible for managing the power state of devices to optimize energy consumption. However, a vulnerability in the sor module can lead to a runtime PM reference leak.
Vulnerability Detail
The vulnerability in the drm/tegra: sor module results in a runtime PM reference leak. This leak can potentially lead to power management issues and impact the overall performance and energy efficiency of the display subsystem. Attackers may be able to exploit this vulnerability to cause denial of service or escalate privileges. The vulnerability has been fixed in Linux Kernel version v5.10.45 by commit 570b3e4020f2aa7ab6908042e7f3a41ab24ce261.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the drm/tegra: sor module of the Linux Kernel can lead to a runtime PM reference leak, impacting power management and potentially allowing for denial of service or privilege escalation. It is crucial to update the Linux Kernel to version v5.10.45 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in power management issues and affect the performance and energy efficiency of the display subsystem. It may also be exploited by attackers for denial of service or privilege escalation.
To fix this vulnerability, update the Linux Kernel to version v5.10.45 or later by pulling the latest changes from the official Linux Kernel repository and rebuilding the kernel.
No specific workaround has been mentioned for this vulnerability.
More details about the fix can be found in the commit 570b3e4020f2aa7ab6908042e7f3a41ab24ce261 in the Linux Kernel repository.
Yes, you can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
