Memory Leak Vulnerability in drm/amd/display
Summary
GSD-2021-1000974: drm/amd/display: Fix potential memory leak in DMUB hw_init. Affects Kernel versions < 9e8c2af010463197315fa54a6c17e74988b5259c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/display package is a component of the Linux Kernel that handles the display functionality for AMD graphics cards. It provides the necessary drivers and interfaces for managing the display hardware and rendering graphics on the screen. This package is widely used in Linux-based systems that utilize AMD GPUs.
Vulnerability Detail
The vulnerability identified in the drm/amd/display package is related to a potential memory leak in the DMUB hw_init function. This function is responsible for initializing the Display Microcontroller Unit Block (DMUB) hardware. The memory leak occurs when the hw_init function fails to release allocated memory properly, leading to a gradual depletion of available memory resources. If exploited, this vulnerability could result in system instability, performance degradation, and potentially allow an attacker to execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid the memory leak issue by restarting the affected system periodically to free up any accumulated memory. However, this is not a permanent solution and updating the Linux Kernel is strongly advised.
Conclusion
In conclusion, the memory leak vulnerability in the drm/amd/display package of the Linux Kernel can be resolved by updating to version v5.10.45 or later. This update will ensure that the DMUB hw_init function properly releases allocated memory, preventing potential system instability and code execution. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
If exploited, this vulnerability could lead to system instability, performance degradation, and potential code execution by an attacker.
The vulnerability is present in versions of the Linux Kernel prior to v5.10.45.
At the time of this report, there is no known exploit for this vulnerability.
The recommended mitigation is to update the Linux Kernel to version v5.10.45 or later.
This vulnerability requires local access to the affected system to exploit.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
