Vulnerability in drm/amd/display Package: Add Affected CRTCs to Atomic State for DSC MST Unplug
Summary
GSD-2022-1002251: drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug. Affects Kernel versions >= 992e51ff0e4b4237fa5c02cd85e383ef71411573, < 2eaa9d86e00713587635c7c9d9b4576d746ae101. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/amd/display package is a component of the Linux Kernel, which is responsible for managing the display subsystem for AMD graphics cards. It provides the necessary functionality to control various aspects of the display, including resolution, refresh rate, and multiple display setups. This vulnerability specifically affects the handling of Display Stream Compression (DSC) Multi-Stream Transport (MST) unplug operations.
Vulnerability Detail
The vulnerability arises from a missing implementation in the drm/amd/display package, which fails to add the affected CRTCs (CRTC stands for Cathode Ray Tube Controller) to the atomic state during DSC MST unplug operations. This omission can lead to inconsistent display configurations and potential security risks. An attacker could potentially exploit this vulnerability to manipulate the display output or gain unauthorized access to sensitive information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the drm/amd/display package, which fails to add affected CRTCs to the atomic state during DSC MST unplug operations, can be mitigated by updating the Linux Kernel to version v5.4.189 or later. This update ensures the necessary fix is applied, reducing the risk of inconsistent display configurations and potential security breaches. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The drm/amd/display package is a component of the Linux Kernel responsible for managing the display subsystem for AMD graphics cards.
DSC MST unplug refers to the operation of disconnecting a Display Stream Compression (DSC) Multi-Stream Transport (MST) setup.
CRTCs (Cathode Ray Tube Controllers) are responsible for controlling the display output of graphics cards.
This vulnerability can lead to inconsistent display configurations and potential security risks. An attacker could manipulate the display output or gain unauthorized access to sensitive information.
To fix this vulnerability, update the Linux Kernel to version v5.4.189 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
