Out of Bounds Write Vulnerability in drm/amdgpu Package
Summary
GSD-2021-1002130: drm/amdgpu: fix out of bounds write. Affects Kernel versions < d3ed72495a59fbfb9377450c8dfe94389a6509a7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amdgpu package is a component of the Linux Kernel that provides support for AMD GPUs. It is responsible for managing the graphics hardware and enabling communication between the GPU and the operating system. The package is widely used in Linux-based systems that utilize AMD graphics cards. However, a vulnerability has been discovered in the package that allows for an out of bounds write.
Vulnerability Detail
The out of bounds write vulnerability in the drm/amdgpu package allows an attacker to write data beyond the boundaries of a buffer. This can lead to memory corruption and potentially enable the attacker to execute arbitrary code or cause a denial of service. The vulnerability originates from a flaw in the package's code, which fails to properly validate input and ensure that data is written within the allocated buffer. The impact of this vulnerability can vary depending on the attacker's capabilities and the context in which the vulnerable code is executed.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.14.16 or later. This update includes a commit (d3ed72495a59fbfb9377450c8dfe94389a6509a7) that addresses the out of bounds write issue in the drm/amdgpu package. Users can obtain the updated kernel from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/. Once the updated kernel is installed, the vulnerability should be mitigated.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the drm/amdgpu package in the Linux Kernel is vulnerable to an out of bounds write issue. This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.14.16 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's capabilities and the context in which the vulnerable code is executed. It could potentially allow an attacker to execute arbitrary code or cause a denial of service.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
The fixed version of the Linux Kernel (v5.14.16 or later) can be obtained from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
For more details about this vulnerability, you can refer to the source at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002130.json.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.