Invalid Parameter Check in dpu_setup_dspp_pcc in Kernel
Summary
GSD-2022-1000632: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc. Affects Kernel versions >= 4259ff7ae509ed880b3a7bb685972c3a3bf4b74b, < 1ebc18836d5df09061657f8c548e594cbb519476. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a critical component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The vulnerability in question, identified as GSD-2022-1000632, affects the Kernel's drm/msm/dpu module. This module is responsible for managing display-related operations on Qualcomm Snapdragon chipsets. The vulnerability arises due to an invalid parameter check in the dpu_setup_dspp_pcc function.
Vulnerability Detail
The vulnerability in dpu_setup_dspp_pcc allows an attacker to exploit the invalid parameter check, potentially leading to unauthorized access, privilege escalation, or denial of service. By providing specially crafted input, an attacker can trigger a buffer overflow or other memory corruption issues, leading to arbitrary code execution or system crashes. This vulnerability was introduced in version v5.8 of the Linux Kernel and has been fixed in version v5.16.5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply patches or backports provided by their Linux distribution or vendor. These patches may address the specific vulnerability and provide temporary mitigation until a full Kernel update can be performed. It is recommended to consult the official documentation or support channels of the respective Linux distribution or vendor for guidance on applying patches.
Conclusion
The vulnerability in dpu_setup_dspp_pcc in the Kernel's drm/msm/dpu module poses a risk of unauthorized access, privilege escalation, or denial of service. It is crucial to update the Kernel to version v5.16.5 or later to mitigate this vulnerability. Regularly updating the Kernel and following best security practices will help ensure the system remains protected against potential exploits. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to gain unauthorized access, escalate privileges, or cause denial of service on systems running the affected version of the Kernel.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the playground will analyze it for any open-source vulnerabilities, including GSD-2022-1000632.
At the time of this report, there are no known public exploits for this vulnerability. However, it is important to promptly update the Kernel to mitigate the risk of potential exploitation.
Yes, this vulnerability can be exploited remotely if the affected system is exposed to the network. It is crucial to apply the necessary updates or patches to prevent potential remote attacks.
The primary solution is to update the Kernel to the latest version. However, if updating is not feasible in the short term, applying patches or backports provided by the Linux distribution or vendor can serve as a temporary mitigation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
