Vulnerability in drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
Summary
GSD-2022-1002352: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe. Affects Kernel versions >= e94236cde4d519cdecd45e2435defba33abdc99f, < 2d6ae8b747fe55f54de4a4441d636974aa53f56a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/tegra package is a component of the Linux Kernel that provides support for NVIDIA Tegra display controllers. It enables the display functionality on Tegra-based devices. The tegra_dsi_ganged_probe function is responsible for initializing the ganged DSI controller on Tegra devices. This vulnerability in the function can lead to a reference leak, potentially causing resource exhaustion and other security issues.
Vulnerability Detail
The vulnerability in the tegra_dsi_ganged_probe function of the drm/tegra package allows for a reference leak. This can result in resource exhaustion and other security implications. The issue was introduced in version v3.19 of the Linux Kernel and was fixed in version v4.19.238. The vulnerability can be exploited by an attacker to exhaust system resources, leading to a denial-of-service condition or potentially allowing for privilege escalation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. However, users can mitigate the risk by updating their Linux Kernel to the fixed version mentioned above.
Conclusion
The vulnerability in the drm/tegra package's tegra_dsi_ganged_probe function can lead to resource exhaustion and potential privilege escalation. It is crucial to update the Linux Kernel to version v4.19.238 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion and potentially allow for privilege escalation. It may result in a denial-of-service condition and could be exploited by attackers to compromise the system.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
At the time of this report, there are no known public exploits for this vulnerability. However, it is still recommended to apply the fix as soon as possible to mitigate any potential risks.
This vulnerability specifically affects the drm/tegra package in the Linux Kernel. However, it is always recommended to keep all software and dependencies up to date to minimize the risk of any potential vulnerabilities.
You can find more information about this vulnerability in the GSD-2022-1002352 JSON report available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002352.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
