Out of Bounds Write Vulnerability in drm/amdgpu Package
Summary
GSD-2021-1002063: drm/amdgpu: fix out of bounds write. Affects Kernel versions < eb3b6805e3e9d98b2507201fd061a231988ce623. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amdgpu package is a component of the Linux Kernel that provides support for AMD Radeon GPUs. It is responsible for managing the graphics hardware and enabling graphics acceleration on AMD GPUs. The package is widely used in Linux-based systems that utilize AMD graphics cards. However, a vulnerability has been discovered in the package that allows for an out of bounds write.
Vulnerability Detail
The out of bounds write vulnerability in the drm/amdgpu package allows an attacker to write data beyond the bounds of an allocated buffer. This can lead to memory corruption, which may result in various security issues such as privilege escalation, denial of service, or the execution of arbitrary code. The vulnerability originates from a flaw in the package's code, which fails to properly validate input data, allowing an attacker to manipulate memory addresses and write data outside the intended boundaries.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The out of bounds write vulnerability in the drm/amdgpu package poses a significant risk to systems utilizing AMD Radeon GPUs. It is recommended to update the Linux Kernel to version v5.10.77 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially be exploited by an attacker to gain elevated privileges, cause a denial of service, or execute arbitrary code on a system utilizing the affected drm/amdgpu package.
At the moment, there is no known workaround for this vulnerability. It is recommended to apply the provided fix by updating the Linux Kernel to the patched version.
No, the vulnerability is fixed in Linux Kernel version v5.10.77 and later. Users of older versions are advised to update to the patched version to mitigate the vulnerability.
Yes, this vulnerability can be exploited remotely if an attacker can gain access to the targeted system and trigger the vulnerable code path in the drm/amdgpu package.
There is no evidence of this vulnerability being actively exploited in the wild. However, it is crucial to apply the fix to ensure the security of systems utilizing the affected package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
