NULL pointer dereference in amdgpu_dm_connector_add_common_modes() in Kernel
Summary
GSD-2022-1001863: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes(). Affects Kernel versions >= e7b07ceef2a650e5ed8ca37997689e086c680daf, < bdc7429708a0772d90c208975694f7c2133b1202. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between different components, and ensures the proper functioning of the system. The amdgpu_dm_connector_add_common_modes() function is part of the display subsystem in the Kernel, specifically related to AMD graphics drivers. This function is responsible for adding common display modes to the connector. However, a vulnerability in this function can lead to a NULL pointer dereference, potentially causing a system crash or other unexpected behavior.
Vulnerability Detail
The vulnerability in amdgpu_dm_connector_add_common_modes() arises from a NULL pointer dereference. When the function is called, it fails to properly handle a NULL pointer, leading to a crash or undefined behavior. An attacker may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition or potentially execute arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven, but it is important to address it to ensure system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider disabling the affected functionality or module related to the amdgpu_dm_connector_add_common_modes() function. However, this may result in limited or degraded display capabilities. It is strongly recommended to apply the official fix by updating the Kernel to the latest version instead of relying on workarounds.
Conclusion
The NULL pointer dereference vulnerability in amdgpu_dm_connector_add_common_modes() in the Kernel can have serious consequences, including system crashes and potential code execution with elevated privileges. It is crucial to update the Kernel to version v5.15.33 or later to mitigate this vulnerability. Disabling the affected functionality or module can be considered as a temporary workaround, but it is recommended to apply the official fix by updating the Kernel. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary, but it can potentially lead to a system crash, denial-of-service (DoS) condition, or even arbitrary code execution with elevated privileges.
You can use tools like Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert Playground allows you to analyze your application's manifest file, such as package-lock.json, without requiring access to the code or installation.
Yes, a fix for this vulnerability is available in Linux Kernel version v5.15.33 or later. It is recommended to update the Kernel to the latest version to address the issue.
While it is possible to apply workarounds such as disabling the affected functionality or module, it is strongly recommended to update the Kernel to the latest version instead. Workarounds may result in limited or degraded display capabilities.
You can obtain the updated Kernel from the official Linux Kernel repository or through your Linux distribution's package manager. Make sure to follow the official documentation or guidelines provided by your distribution for updating the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
