Overflow Issue in drm/bridge: anx7625
Summary
GSD-2022-1001226: drm/bridge: anx7625: Fix overflow issue on reading EDID. Affects Kernel versions >= 8bdfc5dae4e3ba4d99dfb430ef43249e5f1b7730, < db1c47d299298a7c52ccb201905d6be979fd7507. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The anx7625 is a DRM bridge driver in the Linux Kernel. It is responsible for handling the communication between the display controller and the display panel. The driver allows the system to read the Extended Display Identification Data (EDID) from the display panel. The EDID contains information about the display's capabilities and characteristics. However, a vulnerability exists in the anx7625 driver that can lead to an overflow issue when reading the EDID.
Vulnerability Detail
The vulnerability in the anx7625 driver is due to an overflow issue when reading the EDID. This can be exploited by an attacker to cause a buffer overflow, potentially leading to arbitrary code execution or a denial of service. The vulnerability was introduced in Linux Kernel version v5.11 and has been fixed in version v5.17.2. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the anx7625 driver can lead to a buffer overflow when reading the EDID, potentially allowing an attacker to execute arbitrary code or cause a denial of service. It is crucial to update the Linux Kernel to version v5.17.2 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The anx7625 driver is a DRM bridge driver in the Linux Kernel that handles the communication between the display controller and the display panel.
EDID stands for Extended Display Identification Data. It is a standardized data structure stored in the display panel that provides information about the display's capabilities and characteristics.
The vulnerability can be exploited by an attacker to cause a buffer overflow when reading the EDID, potentially leading to arbitrary code execution or a denial of service.
Yes, the vulnerability has been fixed in Linux Kernel version v5.17.2.
To protect your system, it is recommended to update the Linux Kernel to version v5.17.2 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
