Invalid Parameter Check Vulnerability in drm/msm/dsi
Summary
GSD-2022-1000259: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable. Affects Kernel versions >= 5c8290284402bf7d2c12269402b3177b899c78b7, < 56480fb10b976581a363fd168dc2e4fbee87a1a7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/msm/dsi package is a component of the Linux Kernel that provides support for display interfaces on Qualcomm Snapdragon processors. It includes drivers for managing the display subsystem and the physical interface for MIPI DSI (Mobile Industry Processor Interface Display Serial Interface). This vulnerability affects versions of the Linux Kernel starting from v4.3.
Vulnerability Detail
The vulnerability in drm/msm/dsi is related to an invalid parameter check in the msm_dsi_phy_enable function. This flaw allows an attacker to provide malicious input that can lead to a variety of issues, including denial of service, privilege escalation, or information disclosure. The vulnerability was introduced in Linux Kernel v4.3 and has been fixed in v5.15.19.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a possible workaround is to disable the affected functionality or implement additional input validation checks in the affected code. However, these workarounds may not provide complete protection and it is still recommended to update to the latest Kernel version as soon as possible.
Conclusion
The vulnerability in drm/msm/dsi's msm_dsi_phy_enable function can allow an attacker to exploit the system and potentially cause denial of service, privilege escalation, or information disclosure. It is crucial to update the Linux Kernel to version v5.15.19 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the specific exploitation scenario. It could potentially lead to denial of service, privilege escalation, or information disclosure.
You can use tools like Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert Playground allows you to analyze your application's manifest file (e.g., package-lock.json) and provides real-time alerts for open-source vulnerabilities.
At the time of this report, there are no known public exploits for this vulnerability. However, it is always recommended to apply security patches promptly to mitigate the risk.
This vulnerability specifically affects the drm/msm/dsi package in the Linux Kernel. However, it is always advisable to keep all software components up to date to minimize the overall risk of vulnerabilities.
For more detailed information about this vulnerability, including technical details and the specific fix commit, you can refer to the vulnerability database entry at: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000259.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
