Vulnerability in drm/amd/display package: Wrap dcn301_calculate_wm_and_dlg for FPU
Summary
GSD-2022-1000609: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. Affects Kernel versions < 456ba2433844a6483cc4c933aa8f43d24575e341. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/display package is a component of the Linux Kernel ecosystem. It is responsible for managing display functionality on AMD graphics cards. The package includes various functions and modules that handle display-related tasks, such as calculating watermarks and display line gaps (DLGs). These calculations are crucial for ensuring proper display performance and quality.
Vulnerability Detail
The vulnerability identified in the drm/amd/display package involves the dcn301_calculate_wm_and_dlg function, which is responsible for calculating watermarks and DLGs. The function is not properly wrapped for floating-point unit (FPU) operations, potentially leading to security vulnerabilities. While the exact impact and attack plausibility have not been proven, this vulnerability could potentially be exploited to compromise the security of the system. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.16.5 by commit 456ba2433844a6483cc4c933aa8f43d24575e341.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the vulnerability in the drm/amd/display package involving the dcn301_calculate_wm_and_dlg function has the potential to compromise the security of the system. It is crucial to update the Linux Kernel to version v5.16.5 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The exact impact of this vulnerability is not yet proven. However, if exploited, it could potentially compromise the security of the system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this one.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
The fix for this vulnerability is included in Linux Kernel version v5.16.5 and later.
You can find more information about this vulnerability in the GSD-2022-1000609 JSON file available in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000609.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.