Vulnerability in drm/amd/display Package: Add Affected CRTCs to Atomic State for DSC MST Unplug
Summary
GSD-2022-1001229: drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug. Affects Kernel versions >= 44be939ff7ac5858f0dbd8a2a4af1fe198e14db1, < e96a17a3c909f788fb1064bc9d9542c8b2d09093. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/display package is a component of the Linux Kernel that handles display functionality for AMD graphics cards. It provides the necessary drivers and interfaces for managing display outputs, including features like Display Stream Compression (DSC) and Multi-Stream Transport (MST). This vulnerability specifically affects the handling of DSC MST unplug events.
Vulnerability Detail
The vulnerability arises from a missing implementation in the drm/amd/display package, where the affected CRTCs (CRTC stands for Cathode Ray Tube Controller) are not added to the atomic state during DSC MST unplug events. This omission can lead to inconsistencies in the display configuration, potentially causing visual artifacts or system instability. An attacker could potentially exploit this vulnerability to manipulate the display output or trigger a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.2 or later, which includes the necessary fix. Users can obtain the updated kernel from the official Linux Kernel repository. Alternatively, they can apply the specific commit (e96a17a3c909f788fb1064bc9d9542c8b2d09093) to their existing kernel source code and rebuild the kernel.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix or update the Linux Kernel to mitigate the risk.
Conclusion
The vulnerability in the drm/amd/display package, specifically related to DSC MST unplug events, can lead to display inconsistencies and potential exploitation. It is crucial to update the Linux Kernel to the recommended version or apply the provided fix to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/amd/display package is a component of the Linux Kernel responsible for managing display functionality for AMD graphics cards.
DSC stands for Display Stream Compression, a feature that reduces the bandwidth required for high-resolution displays. MST stands for Multi-Stream Transport, which enables the use of multiple displays through a single DisplayPort connection.
CRTCs (Cathode Ray Tube Controllers) are responsible for controlling the timing and synchronization of display outputs in graphics hardware.
This vulnerability can result in visual artifacts, display inconsistencies, or system instability. It could also be exploited by an attacker to manipulate the display output or cause a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version v5.17.2 or later. Alternatively, apply the specific commit (e96a17a3c909f788fb1064bc9d9542c8b2d09093) to your existing kernel source code and rebuild the kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.