Memory Leak Vulnerability in drm/amdkfd Package
Summary
UVI-2021-1001691: drm/amdkfd: fix a potential ttm->sg memory leak. Affects Kernel versions >= 264fb4d332f5e76743818480e482464437837c52, < 7e5ce6029b627efb4a004746cfdc1eeff850e6eb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The drm/amdkfd package is a component of the Linux Kernel that provides support for AMD GPUs in the Kernel's Direct Rendering Manager (DRM) subsystem. It enables communication between the GPU and the CPU, allowing for efficient graphics rendering and computation. The package is critical for proper functioning of AMD GPUs on Linux systems.
Vulnerability Detail
The identified vulnerability in the drm/amdkfd package is related to a potential memory leak in the ttm->sg memory. This memory leak can occur under certain conditions, leading to the consumption of system resources and potentially causing performance degradation or system instability. The vulnerability has been assigned the ID UVI-2021-1001691 and was introduced in version v5.14 of the Linux Kernel. It has been fixed in version v5.14.12 by commit 7e5ce6029b627efb4a004746cfdc1eeff850e6eb.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The memory leak vulnerability in the drm/amdkfd package can be resolved by updating the Linux Kernel to version v5.14.12 or later. It is important to apply this fix to ensure system security and stability. For further support or assistance with vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak in the ttm->sg memory, potentially causing performance degradation or system instability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply provide the manifest file (e.g., package-lock.json) of your application, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
No known exploit has been reported for this vulnerability at the moment. However, it is still important to apply the recommended fix to ensure system security and stability.
The recommended solution is to update the Linux Kernel to the fixed version. However, if updating the Kernel is not feasible in your environment, you can consider implementing additional security measures, such as restricting access to the affected package or implementing network-level protections.
You can find more information about this vulnerability, including the specific code changes and commit details, in the vulnerability report available at the following link: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/UVI-2021-1001691.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
