Vulnerability in drm/amdgpu Package: gart.bo pin_count Leak
Summary
GSD-2021-1001620: drm/amdgpu: fix gart.bo pin_count leak. Affects Kernel versions < 621ddffb70db824eabd63d18ac635180fe9500f9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amdgpu package is a component of the Linux Kernel that provides support for AMD Radeon GPUs. It includes the necessary drivers and modules to enable graphics acceleration and other GPU-related functionalities on Linux systems. The gart.bo pin_count leak vulnerability affects this package and can potentially lead to security issues.
Vulnerability Detail
The gart.bo pin_count leak vulnerability in the drm/amdgpu package allows for a pin_count leak in the gart.bo object. This can result in resource leaks and potential memory corruption. An attacker may be able to exploit this vulnerability to gain unauthorized access, execute arbitrary code, or cause a denial-of-service condition. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The gart.bo pin_count leak vulnerability in the drm/amdgpu package can pose security risks and potential resource leaks. It is crucial to update the Linux Kernel to version v5.10.74 or later to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's capabilities and the system's configuration. It could potentially lead to unauthorized access, code execution, or denial-of-service attacks.
As of now, no known exploits for this vulnerability have been reported. However, it is always recommended to apply security patches and updates to mitigate potential risks.
The exact attack vector for this vulnerability has not been specified. It is advisable to keep systems updated and follow security best practices to minimize the risk of remote exploitation.
The vulnerability is present in versions of the Linux Kernel prior to v5.10.74. Updating to this version or a later one will address the issue.
You can find more details about this vulnerability in the Open Source Vulnerability database maintained by the Cloud Security Alliance. The vulnerability ID is GSD-2021-1001620.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
