Fix shutdown crash in drm/meson component not probed
Summary
UVI-2021-1000633: drm/meson: fix shutdown crash when component not probed. Affects Kernel versions >= d2100ef32a8cfd024bad94f4fbc5e53d40d2b3da, < 4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/meson package is a component of the Linux Kernel that provides support for the Amlogic Meson display controller. It is responsible for managing graphics and display functionality on devices using Amlogic SoCs. The package is widely used in various Linux distributions and is critical for proper display operation on affected devices.
Vulnerability Detail
The vulnerability identified as UVI-2021-1000633 in the drm/meson package can lead to a shutdown crash when a component is not probed. This issue was introduced in version v5.4.106 of the Linux Kernel and fixed in version v5.4.124. When the vulnerable code is triggered, it can cause a crash during system shutdown, potentially leading to a denial-of-service situation. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the drm/meson package can lead to a shutdown crash when a component is not probed. It is crucial to update the Linux Kernel to version v5.4.124 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a shutdown crash during system shutdown, potentially resulting in a denial-of-service situation.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
No known exploit has been reported for this vulnerability at this time.
The recommended mitigation is to update the Linux Kernel to version v5.4.124 or later, which includes the fix for this vulnerability.
While it is technically possible to manually patch the vulnerable code, it is strongly recommended to update to the latest version of the Linux Kernel instead. Manual patching can be complex and error-prone, and may introduce other issues or compatibility problems.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
