Vulnerability in Kernel Package: drm/edid
Summary
GSD-2021-1002158: drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read. Affects Kernel versions >= e11f5bd8228fc3760c221f940b9f6365dbf3e7ed, < 97794170b696856483f74b47bfb6049780d2d3a0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services such as device drivers, memory management, and process scheduling. The drm/edid module within the Kernel package handles Extended Display Identification Data (EDID) for graphics connectors. EDID contains information about the capabilities and characteristics of connected display devices.
Vulnerability Detail
The vulnerability in drm/edid, specifically in the connector_bad_edid() function, allows an attacker to manipulate the 'num_of_ext' variable, which represents the number of extensions in the EDID. By modifying this value, an attacker can trick the system into reading more data blocks than actually exist in the EDID. This can lead to buffer overflows or other memory corruption issues, potentially resulting in arbitrary code execution or system crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the affected functionality by blacklisting the 'drm_kms_helper' module. This can be achieved by adding the following line to the '/etc/modprobe.d/blacklist.conf' file:
blacklist drm_kms_helper
After adding the line, reboot the system for the changes to take effect. However, it is important to note that this workaround disables the entire 'drm_kms_helper' module, which may impact other display-related functionalities.
Conclusion
The vulnerability in the Kernel package's drm/edid module can allow an attacker to manipulate EDID data, potentially leading to arbitrary code execution or system crashes. It is crucial to update the Kernel package to version v5.15 or later to fix this vulnerability. Alternatively, users can apply the provided workaround of blacklisting the 'drm_kms_helper' module. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker to execute arbitrary code or cause system crashes, leading to a denial of service (DoS) condition.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities.
At the time of this report, there are no known public exploits for this vulnerability. However, it is crucial to apply the recommended fix or workaround to mitigate the risk.
Yes, this vulnerability can be exploited remotely if the attacker can send specially crafted EDID data to a targeted system. It is important to apply the necessary patches or updates to prevent potential exploitation.
The primary solution to mitigate this vulnerability is to update the Kernel package to the recommended version. However, if updating is not feasible, applying the provided workaround of blacklisting the 'drm_kms_helper' module can help mitigate the risk to some extent.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
