Vulnerability in drm/panfrost: Fix shrinker list corruption by madvise IOCTL
Summary
GSD-2022-1004709: drm/panfrost: Fix shrinker list corruption by madvise IOCTL. Affects Kernel versions >= 013b6510131568ce4e01856d5360bfdfe9c3632f, < 393594aad55179eb761af41533d8d1d6eb4543b0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/panfrost package is a component of the Linux Kernel that provides support for the Panfrost GPU driver. This driver is used for ARM Mali GPUs and enables graphics acceleration on devices running Linux. The package is responsible for managing memory resources and handling various operations related to the GPU. However, a vulnerability has been discovered in the package that can lead to list corruption when processing madvise IOCTL requests.
Vulnerability Detail
The vulnerability in drm/panfrost arises from a flaw in the handling of madvise IOCTL requests. By exploiting this vulnerability, an attacker could corrupt the shrinker list, potentially leading to memory corruption or other unexpected behavior. The impact of this vulnerability is dependent on the specific use case and system configuration. However, it could potentially be leveraged to execute arbitrary code or escalate privileges. The vulnerability was introduced in version v5.4 of the Linux Kernel and has been fixed in version v5.4.207.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by updating the Linux Kernel to the patched version.
Conclusion
The vulnerability in drm/panfrost that allowed for shrinker list corruption by madvise IOCTL has been addressed in Linux Kernel version v5.4.207. It is crucial to update the Linux Kernel to the patched version to mitigate the risk of memory corruption and potential exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
drm/panfrost is a component of the Linux Kernel that provides support for the Panfrost GPU driver, enabling graphics acceleration on devices with ARM Mali GPUs.
The impact of this vulnerability can vary depending on the system configuration and use case. It could potentially lead to memory corruption, arbitrary code execution, or privilege escalation.
To fix this vulnerability, update the Linux Kernel to version v5.4.207 or later, which includes the necessary patch to address the issue.
No, there is no known workaround for this vulnerability. It is crucial to apply the provided fix by updating the Linux Kernel.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository or through their respective Linux distribution's package manager.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
