In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the corresponding amdgpu_dm_connector objects are freed, creating dangling pointers in the HDCP code. When the dock is plugged back, the dangling pointers are dereferenced, resulting in a slab-use-after-free: [ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgp...
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector objects without incrementing the kref reference counts. When using a USB-C dock, and the dock is unplugged, the corresponding amdgpu_dm_connector objects are freed, creating dangling pointers in the HDCP code. When the dock is plugged back, the dangling pointers are dereferenced, resulting in a slab-use-after-free: [ 66.775837] BUG: KASAN: slab-use-after-free in event_property_validate+0x42f/0x6c0 [amdgp...
영향 제품·버전
제품 Linux Linux, linux kernel, debian linux
영향 버전 Linux Linux, linux kernel, debian linux >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < e25139c4aa5621f2db8e86688c33546cdd885e42, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < bbc66abcd297be67e3d835276e21e6fdc65205a6, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < dd329f04dda35a66e0c9ed462ba91bd5f2c8be70, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < 3a782a83d130ceac6c98a87639ddd89640bff486, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < be593d9d91c5a3a363d456b9aceb71029aeb3f1d, >= 5.5, >= 5.5 < 6.1.138, >= 6.2 < 6.6.90, >= 6.7 < 6.12.28, >= 6.13 < 6.14.6, 6.15, 11.0
수정 버전 Linux Linux, linux kernel, debian linux 6.1.138, 6.6.90, 6.12.28, 6.14.6
Linux Linux, linux kernel, debian linux의 현재 전체 버전이 공식 영향 범위(Linux Linux, linux kernel, debian linux >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < e25139c4aa5621f2db8e86688c33546cdd885e42, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < bbc66abcd297be67e3d835276e21e6fdc65205a6, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < dd329f04dda35a66e0c9ed462ba91bd5f2c8be70, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < 3a782a83d130ceac6c98a87639ddd89640bff486, >= da3fd7ac0bcf372cc57117bdfcd725cca7ef975a < be593d9d91c5a3a363d456b9aceb71029aeb3f1d, >= 5.5, >= 5.5 < 6.1.138, >= 6.2 < 6.6.90, >= 6.7 < 6.12.28, >= 6.13 < 6.14.6, 6.15, 11.0)에 포함되는지 확인합니다. OS를 선택하면 해당 OS의 제품·패키지·KB·APAR 확인 명령만 표시됩니다.
조치방안
제3자 참조와 수정 버전 값(6.1.138, 6.6.90, 6.12.28, 6.14.6)은 보조 근거로만 사용하고, 공급사 공식 보안 권고에서 조치 기준을 재확인합니다.
조치 후 확인사항
패치 후 같은 명령으로 전체 버전을 다시 확인해 Linux Linux, linux kernel, debian linux 6.1.138, 6.6.90, 6.12.28, 6.14.6 기준을 충족하는지 확인합니다. 이어서 메모리 손상 관련 오류·공격 흔적이 새로 발생하지 않는지 확인합니다.
