Critical Vulnerability in Linux Kernel: PM Runtime Leakage in am65_cpsw_nuss_ndo_slave_open
Summary
DEBIAN-CVE-2022-50461: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() Ensure pm_runtime_put() is issued in error path. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux-based operating systems, managing hardware resources and providing essential services for applications. It is known for its robustness, flexibility, and extensive support for various hardware architectures. However, vulnerabilities can arise, impacting system stability and security. The specific vulnerability identified here relates to the PM runtime management in the am65_cpsw driver, which can lead to resource leaks and potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the net: ethernet: ti: am65-cpsw module, specifically within the am65_cpsw_nuss_ndo_slave_open() function. This issue arises from improper handling of power management runtime, which can lead to resource leakage if the pm_runtime_put() function is not called in the error path. This oversight can result in degraded performance and increased resource consumption, potentially leading to system crashes or instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating the package as described above.
Conclusion
The vulnerability identified in the Linux kernel's am65_cpsw driver poses significant risks related to power management and resource handling. It is crucial for users to update their systems to the patched version to mitigate these risks effectively. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability is related to improper power management in the Linux kernel's am65_cpsw driver, leading to potential resource leaks.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Failure to address this vulnerability may lead to increased resource consumption, system instability, and potential crashes.
Yes, the vulnerability is fixed in version 6.1.4-1 of the Linux package.
While there are no specific workarounds, it is advisable to monitor your system closely for any unusual behavior until the update can be applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
