Описание
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/hdcp: Add encoder check in hdcp2_get_capability
Add encoder check in intel_hdcp2_get_capability to avoid
null pointer error.
A flaw was found in the Linux kernel's Intel i915 graphics driver. A missing validation check on the display encoder within the High-bandwidth Digital Content Protection (HDCP) component allows a local authenticated attacker to trigger a null pointer dereference. This flaw can cause a kernel crash, resulting in a Denial of Service (DoS).
Меры по смягчению последствий
Prevent loading of the i915 kernel module on systems where Intel graphics hardware is not required.
- Create a configuration file named
/etc/modprobe.d/blacklist-i915.confwith the following entries:
Caveat: Disabling the i915 driver prevents hardware-accelerated graphics and display output on Intel graphics adapters, which will impact graphical desktop sessions. Headless servers or systems using non-Intel display adapters will not be impacted. A system restart is required if the module is already loaded in the running kernel.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Will not fix | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Will not fix | ||
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:6966 | 13.05.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in intel_hdcp2_get_capability to avoid null pointer error.
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in intel_hdcp2_get_capability to avoid null pointer error.
In the Linux kernel, the following vulnerability has been resolved: d ...
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2_get_capability Add encoder check in intel_hdcp2_get_capability to avoid null pointer error.
EPSS
5.5 Medium
CVSS3