Null Pointer Dereference in drm/msm Package
Summary
GSD-2021-1002038: drm/msm: Fix null pointer dereference on pointer edp. Affects Kernel versions >= ab5b0107ccf3821a6837b0f2819270d6fa0b278f, < 91a340768b012f5b910a203a805b97a345b3db37. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/msm package is a component of the Linux Kernel that provides support for graphics hardware found in Qualcomm Snapdragon SoCs. It includes drivers for display controllers, GPUs, and other related functionalities. The package is responsible for managing the display output and rendering graphics on devices that utilize Qualcomm Snapdragon processors.
Vulnerability Detail
The vulnerability identified as GSD-2021-1002038 in the drm/msm package involves a null pointer dereference on the 'edp' pointer. This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The null pointer dereference occurs when the 'edp' pointer is accessed without proper validation, leading to a crash or system instability. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.75 or later. The fix for this issue was implemented in commit 91a340768b012f5b910a203a805b97a345b3db37. Updating to the latest version of the Linux Kernel will ensure that the null pointer dereference on the 'edp' pointer is properly addressed.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The null pointer dereference vulnerability in the drm/msm package can lead to a denial-of-service (DoS) condition or potential execution of arbitrary code. It is crucial to update the Linux Kernel to version v5.10.75 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a denial-of-service (DoS) condition to potential execution of arbitrary code. However, the actual impact and attack plausibility have not been proven yet.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for any open-source vulnerabilities, including GSD-2021-1002038.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the recommended fix to mitigate any potential risks.
Unfortunately, there are no specific mitigations available for this vulnerability other than updating the Linux Kernel to the recommended version. It is crucial to prioritize the update to ensure the security and stability of your system.
You can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002038.json) for more information about this vulnerability, including its timeline and references.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.