NULL pointer dereference in amdgpu_dm_connector_add_common_modes() in Kernel
Summary
GSD-2022-1002096: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes(). Affects Kernel versions >= e7b07ceef2a650e5ed8ca37997689e086c680daf, < 19a7eba284790cfbba2945deb2363cf03ce41648. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The amdgpu_dm_connector_add_common_modes() function is part of the display subsystem in the Kernel, specifically related to AMD graphics cards. This function is responsible for adding common display modes to the connector. However, a vulnerability in this function can lead to a NULL pointer dereference, causing the system to crash or potentially allowing an attacker to execute arbitrary code.
Vulnerability Detail
The vulnerability in amdgpu_dm_connector_add_common_modes() arises from a NULL pointer dereference. When the function is called, it fails to properly handle a NULL pointer, leading to a crash or potential code execution. An attacker could potentially exploit this vulnerability to gain unauthorized access to the system or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet, but it is essential to address it to ensure system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of the Linux Kernel, there is no specific workaround available. The recommended approach is to update the Kernel to the patched version.
Conclusion
The NULL pointer dereference vulnerability in amdgpu_dm_connector_add_common_modes() in the Kernel can lead to system crashes or potential code execution. It is crucial to update the Linux Kernel to version v5.10.110 or later to address this vulnerability. By updating, the NULL pointer dereference will be properly handled, ensuring system stability and security. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from system crashes to potential code execution. It could be exploited by an attacker to gain unauthorized access or cause a denial-of-service (DoS) condition.
You can check if your system is affected by this vulnerability by verifying the version of the Linux Kernel installed. If the Kernel version is earlier than v5.10.110, it is recommended to update to the latest version.
There are no known instances of this vulnerability being exploited in the wild. However, it is crucial to address it promptly to mitigate any potential risks.
The recommended approach to mitigate this vulnerability is to update the Linux Kernel to the patched version. There are no known alternative mitigations available.
You can find more information about this vulnerability in the Linux Kernel security advisories and the commit history of the Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
