Reference Leak in tegra_dsi_ganged_probe in Kernel
Summary
GSD-2022-1002089: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe. Affects Kernel versions >= e94236cde4d519cdecd45e2435defba33abdc99f, < 1e06710c43a090f14bb67714265a01cd1d7a37c5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential services and functions, including device drivers, memory management, and process scheduling. The tegra_dsi_ganged_probe function is part of the Direct Rendering Manager (DRM) subsystem in the Kernel, specifically designed for NVIDIA Tegra display controllers. This vulnerability in tegra_dsi_ganged_probe can lead to a reference leak, potentially causing memory leaks and other related issues.
Vulnerability Detail
The vulnerability in tegra_dsi_ganged_probe arises from a reference leak, which occurs when a reference to an object is not properly released after it is no longer needed. This can result in memory leaks, where memory resources are not freed, leading to potential performance degradation and system instability. Attackers may be able to exploit this vulnerability to exhaust system resources, causing denial-of-service conditions or potentially executing arbitrary code. The vulnerability was introduced in Linux Kernel version v3.19 and was fixed in version v5.10.110 by commit 1e06710c43a090f14bb67714265a01cd1d7a37c5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the affected functionality by removing or disabling the tegra_dsi_ganged_probe module. However, this may result in the loss of certain display features or compatibility issues with NVIDIA Tegra display controllers. It is recommended to apply the official fix or update the Kernel to ensure the vulnerability is properly addressed.
Conclusion
The reference leak vulnerability in tegra_dsi_ganged_probe in the Kernel can lead to memory leaks and potential system instability. It is crucial to update the Linux Kernel to version v5.10.110 or later to ensure the vulnerability is properly addressed. Users can also utilize the Vulert Playground (https://vulert.com/scanner) to check if their system is affected by this vulnerability and receive real-time alerts for open-source vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to memory leaks and potential system instability. Attackers may be able to exploit it to cause denial-of-service conditions or execute arbitrary code.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
Yes, a workaround is available by disabling the tegra_dsi_ganged_probe module. However, this may result in the loss of certain display features or compatibility issues with NVIDIA Tegra display controllers.
The vulnerability was fixed in Linux Kernel version v5.10.110 by commit 1e06710c43a090f14bb67714265a01cd1d7a37c5. It is recommended to update the Kernel to this version or later to ensure the vulnerability is addressed.
You can find more information about this vulnerability in the GSD-2022-1002089 entry of the GSD Database maintained by the Cloud Security Alliance. The source link is available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002089.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
