Vulnerability in drm/amd/pm Package: Update Intermediate Power State for SI
Summary
GSD-2021-1001677: drm/amd/pm: Update intermediate power state for SI. Affects Kernel versions < 68d4fbe6220cd1f3d07cab0a4901e62f8c12cc68. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD GPUs. It provides functionality for controlling the power state of the GPUs and optimizing power consumption. This vulnerability affects the package's handling of intermediate power states for SI (Southern Islands) GPUs.
Vulnerability Detail
The vulnerability in the drm/amd/pm package allows for potential security vulnerabilities. Although the actual impact and attack plausibility have not been proven, it is crucial to address this issue to ensure the security of systems utilizing SI GPUs. The vulnerability has been fixed in Linux Kernel version v5.10.70 by commit 68d4fbe6220cd1f3d07cab0a4901e62f8c12cc68.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the drm/amd/pm package, which affects the handling of intermediate power states for SI GPUs, has been addressed in Linux Kernel version v5.10.70. It is crucial to update the kernel to this version or later to ensure the security of systems utilizing SI GPUs. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The actual impact of this vulnerability is yet to be proven. However, it is important to address it to mitigate potential security risks.
The vulnerability affects versions of the Linux Kernel prior to v5.10.70.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
More details about the fix can be found in the commit 68d4fbe6220cd1f3d07cab0a4901e62f8c12cc68 in the official Linux Kernel repository.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if any open-source vulnerabilities, including this one, are detected.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
