SB20250226196 - Memory leak in Linux kernel display amdgpu_dm driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Memory leak (CVE-ID: CVE-2022-49135)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the dp_link_settings_read(), dp_phy_settings_read(), dp_dsc_clock_en_read(), dp_dsc_slice_width_read(), dp_dsc_slice_height_read(), dp_dsc_bits_per_pixel_read(), dp_dsc_pic_width_read(), dp_dsc_pic_height_read(), dp_dsc_chunk_size_read(), dp_dsc_slice_bpg_offset_read() and dcc_en_bits_read() functions in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3ce1497add6d17b48cc9df65095bd20202d93994
• https://git.kernel.org/stable/c/5d5c6dba2b43e28845d7d7ed32a36802329a5f52
• https://git.kernel.org/stable/c/7e10369c72db7a0e2f77b2e306aadc07aef6b07a
• https://git.kernel.org/stable/c/9d0bef3cc22cf250278ed45b829f062a00af9e27
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3