NULL pointer dereference crash on unload in drm: mxsfb
Summary
GSD-2021-1002114: drm: mxsfb: Fix NULL pointer dereference crash on unload. Affects Kernel versions >= ae1ed0093281939b80664a687689f12436c0e874, < b0e6db0656ddfd8bb57303c2ef61ee1c1cc694a8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The drm: mxsfb package is a component of the Linux Kernel, which is responsible for managing graphics and display functionality. It provides support for various display controllers, including the mxsfb driver. The mxsfb driver is used for driving displays on Freescale i.MX SoCs. This vulnerability affects the mxsfb driver and can lead to a NULL pointer dereference crash when unloading the driver.
Vulnerability Detail
The vulnerability in the mxsfb driver is caused by a NULL pointer dereference. When the driver is unloaded, a function is called that dereferences a pointer without checking if it is NULL. This can result in a crash of the system. An attacker with local access to the system may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.14.15 or later. This fix is included in the commit b0e6db0656ddfd8bb57303c2ef61ee1c1cc694a8. Users can obtain the updated kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Conclusion
The NULL pointer dereference crash on unload vulnerability in the drm: mxsfb package of the Linux Kernel can lead to a system crash when unloading the mxsfb driver. It is recommended to update the Linux Kernel to version v5.14.15 or later to fix this vulnerability. No known workarounds are available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a NULL pointer dereference crash when unloading the mxsfb driver in the Linux Kernel. An attacker with local access to the system may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any vulnerabilities are found.
Yes, a patch for this vulnerability is available in the Linux Kernel version v5.14.15. It is recommended to update to this version or later to fix the vulnerability.
There are no known exploits for this vulnerability at the moment. However, it is still important to apply the fix to prevent potential exploitation.
No, this vulnerability requires local access to the system to exploit. Remote exploitation is not possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.