Reference Leak in tegra_dsi_ganged_probe in Kernel
Summary
GSD-2022-1002437: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe. Affects Kernel versions >= e94236cde4d519cdecd45e2435defba33abdc99f, < 5e8fdb6392d945d33fef959eab73f8c34bc0a63b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functions for device drivers, memory management, and process scheduling. The tegra_dsi_ganged_probe function is part of the Direct Rendering Manager (DRM) subsystem in the Kernel, specifically designed for NVIDIA Tegra display controllers. This function handles the initialization and probing of ganged DSI (Display Serial Interface) panels on Tegra devices.
Vulnerability Detail
The tegra_dsi_ganged_probe function in the Kernel suffers from a reference leak vulnerability. This vulnerability allows an attacker to exhaust system resources by repeatedly triggering the probe function, leading to a denial-of-service condition. By exploiting this vulnerability, an attacker could potentially cause a system crash or disrupt the normal operation of the affected device. The vulnerability was introduced in version v3.19 of the Kernel and was fixed in version v4.14.276.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply a patch that specifically targets the reference leak in tegra_dsi_ganged_probe. The following code snippet demonstrates the patch:
--- a/drivers/gpu/drm/tegra/tegra_dsi.c
+++ b/drivers/gpu/drm/tegra/tegra_dsi.c
@@ -1234,6 +1234,7 @@ static int tegra_dsi_ganged_probe(struct tegra_dsi *dsi)
goto remove_host;
}
+ put_device(&dsi->dev);
return 0;
remove_host:
Conclusion
In conclusion, the tegra_dsi_ganged_probe function in the Kernel is vulnerable to a reference leak, which can be exploited to exhaust system resources and cause a denial-of-service condition. It is crucial to update the Linux Kernel to version v4.14.276 or later to mitigate this vulnerability. Users can also apply a patch as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can be exploited by an attacker to exhaust system resources and cause a denial-of-service condition. It may lead to system crashes or disrupt the normal operation of the affected device.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Yes, a workaround is available. Users can apply a patch that specifically targets the reference leak in tegra_dsi_ganged_probe. The provided code snippet demonstrates the patch.
The recommended solution is to update the Linux Kernel to version v4.14.276 or later. This update includes the fix for the reference leak in tegra_dsi_ganged_probe.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository. The repository provides the latest stable versions of the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
