Vulnerability in drm/amd/pm Package: Update intermediate power state for SI
Summary
GSD-2021-1001763: drm/amd/pm: Update intermediate power state for SI. Affects Kernel versions < 06a18e64256f7aecb5a27df02faa3568fcd3c105. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD GPUs. It provides functionality for managing power states and transitions, ensuring optimal performance and energy efficiency. This vulnerability affects the package's handling of intermediate power states for SI (Southern Islands) GPUs.
Vulnerability Detail
The vulnerability in the drm/amd/pm package allows for potential security risks. While the exact impact and attack plausibility have not been proven, it is crucial to address this vulnerability to mitigate any potential threats. The vulnerability has been fixed in Linux Kernel version v5.14.9 by commit 06a18e64256f7aecb5a27df02faa3568fcd3c105.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel as described in the 'how_to_fix' section.
Conclusion
The vulnerability in the drm/amd/pm package, which affects the handling of intermediate power states for SI GPUs, has been addressed in Linux Kernel version v5.14.9. It is crucial to update the Linux Kernel to mitigate any potential security risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The exact impact of this vulnerability is not yet proven. However, it is important to address it to ensure the security of the system and mitigate potential risks.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
As of now, there is no known exploit for this vulnerability. However, it is always recommended to apply security patches and updates to mitigate potential risks.
It is not recommended to manually patch the vulnerability without updating the entire Linux Kernel. Updating the kernel ensures that all necessary fixes and improvements are applied, providing a comprehensive solution to the vulnerability.
You can find more information about this vulnerability in the GSD-2021-1001763 JSON report available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001763.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
