Memory Leak Vulnerability in drm/amd/pm Package
Summary
GSD-2021-1002744: drm/amd/pm: fix a potential gpu_metrics_table memory leak. Affects Kernel versions >= 95868b85764aff2dcbf78d3054076df75446ad15, < 257b3bb16634fd936129fe2f57a91594a75b8751. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/pm package is a component of the Linux Kernel that handles power management for AMD graphics cards. It provides functionality for controlling the power consumption and performance of the GPU. The package is responsible for managing the GPU metrics table, which is used to collect and store performance data. The vulnerability in this package can lead to a memory leak, potentially causing resource exhaustion and system instability.
Vulnerability Detail
The vulnerability in the drm/amd/pm package is due to a memory leak in the handling of the gpu_metrics_table. When certain conditions are met, memory allocated for the table is not properly freed, leading to a gradual accumulation of memory over time. This can result in resource exhaustion, impacting system performance and stability. An attacker may be able to exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code with elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by updating the Linux Kernel to the latest version.
Conclusion
The memory leak vulnerability in the drm/amd/pm package of the Linux Kernel can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.15.11 or later to fix this vulnerability. No known workarounds are available, and it is recommended to apply the update as soon as possible. For further support, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing resource exhaustion and system instability. It may also allow an attacker to execute arbitrary code with elevated privileges.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any vulnerabilities are found.
At the time of this report, there are no known exploits for this vulnerability. However, it is crucial to apply the recommended fix to mitigate the risk.
This vulnerability requires local access to the system. An attacker would need to have the ability to execute code on the affected machine to exploit the memory leak.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide guidance and assistance in addressing this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
