NULL pointer dereference crash on unload in drm: mxsfb
Summary
UVI-2021-1001868: drm: mxsfb: Fix NULL pointer dereference crash on unload. Affects Kernel versions >= ae1ed0093281939b80664a687689f12436c0e874, < b0e6db0656ddfd8bb57303c2ef61ee1c1cc694a8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm: mxsfb package is a component of the Linux Kernel that provides support for the MXSFB display controller found in certain hardware platforms. It enables the display controller to communicate with the graphics subsystem and render graphics on the screen. The vulnerability in this package can lead to a NULL pointer dereference crash when unloading the module.
Vulnerability Detail
The vulnerability arises from a NULL pointer dereference issue in the drm: mxsfb package. When unloading the module, a NULL pointer is accessed, causing a crash. This vulnerability can be exploited by an attacker with local access to the system to cause a denial-of-service (DoS) condition. The impact of this vulnerability is limited to the availability of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The NULL pointer dereference crash on unload vulnerability in drm: mxsfb can be mitigated by updating the Linux Kernel to version v5.14.15 or later. This update includes the necessary fix to prevent the crash. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a NULL pointer dereference crash, causing a denial-of-service (DoS) condition. However, the impact is limited to the availability of the affected system.
An attacker with local access to the system can exploit this vulnerability.
No, remote exploitation is not possible as the attacker requires local access to the system.
Updating the Linux Kernel to version v5.14.15 or later, which includes the fix for this vulnerability.
The updated kernel can be obtained from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
