Null Pointer Dereference in drm/msm Package
Summary
GSD-2021-1001825: drm/msm: Fix null pointer dereference on pointer edp. Affects Kernel versions >= ab5b0107ccf3821a6837b0f2819270d6fa0b278f, < f302be08e3de94db8863a0b2958b2bb3e8e998e6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/msm package is a component of the Linux Kernel that provides support for graphics and display functionality on Qualcomm MSM (Mobile Station Modem) chipsets. It includes drivers and modules for managing display controllers, connectors, and panels. The package is widely used in devices running on Qualcomm chipsets, such as smartphones and tablets. However, a vulnerability has been identified in the package that can lead to a null pointer dereference.
Vulnerability Detail
The null pointer dereference vulnerability in the drm/msm package occurs when a pointer named 'edp' is dereferenced without being properly checked for null. This can result in a crash or system instability. An attacker may be able to exploit this vulnerability to cause a denial of service (DoS) condition or potentially execute arbitrary code with kernel privileges. The vulnerability was introduced in version v4.0 of the Linux Kernel and has been fixed in version v5.4.155.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a possible workaround is to disable the functionality related to the vulnerable code. This can be achieved by modifying the Kernel configuration or disabling the corresponding module. However, this workaround may result in the loss of certain display features or reduced functionality.
Conclusion
The null pointer dereference vulnerability in the drm/msm package of the Linux Kernel can lead to crashes, system instability, and potential privilege escalation. It is crucial to update the Kernel to version v5.4.155 or later to mitigate this vulnerability. If immediate updating is not possible, disabling the vulnerable functionality can serve as a temporary workaround. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a crash or system instability, potentially causing a denial of service (DoS) condition. In some cases, an attacker may be able to exploit the vulnerability to execute arbitrary code with kernel privileges.
The vulnerability was introduced in version v4.0 of the Linux Kernel. Versions prior to v5.4.155 are affected.
Devices running on Qualcomm chipsets that utilize the drm/msm package are potentially vulnerable. However, the impact may vary depending on the specific device configuration and the presence of mitigations.
Yes, the vulnerability has been fixed in version v5.4.155 of the Linux Kernel. It is recommended to update to this version or a later one to mitigate the vulnerability.
Exploiting this vulnerability typically requires local access to the affected device. However, if an attacker already has local access, they may be able to exploit the vulnerability remotely by executing malicious code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
