Refcount Leak in ts4800_wdt Probe - Kernel
Summary
GSD-2022-1002983: watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe. Affects Kernel versions >= bf9006399939762e6cd32445e848e56727df9d98, < 91fa5aa53f68b85e779164b3127c7e23cad5c457. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The ts4800_wdt module is a watchdog driver specifically designed for the Technologic Systems TS-4800 single-board computer. It monitors the system's operation and resets it if necessary to prevent potential failures or crashes.
Vulnerability Detail
The ts4800_wdt module in the Kernel suffers from a refcount leak vulnerability in the ts4800_wdt_probe function. This vulnerability was introduced in Kernel version 4.5 and affects all subsequent versions until it was fixed in version 5.17.15. An attacker could exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code with elevated privileges. The vulnerability occurs due to improper handling of reference counts, leading to a memory leak. By repeatedly triggering the vulnerable code path, an attacker could exhaust system resources and cause a system crash or instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the ts4800_wdt module if it is not essential for their system's operation. This can be achieved by blacklisting the module or removing it from the system entirely. However, it is important to note that disabling the watchdog functionality may leave the system more vulnerable to potential failures or crashes. Therefore, it is strongly recommended to apply the official fix by updating the Kernel as soon as possible.
Conclusion
In conclusion, the ts4800_wdt module in the Kernel is vulnerable to a refcount leak in the ts4800_wdt_probe function. This vulnerability can potentially lead to a denial-of-service condition or arbitrary code execution. To mitigate this risk, it is crucial to update the Kernel to version 5.17.15 or later. Users can also utilize the Vulert Playground at https://vulert.com/scanner to check if their system is affected by this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to a denial-of-service condition or allow an attacker to execute arbitrary code with elevated privileges. By exploiting the refcount leak, an attacker could exhaust system resources and cause system instability or crashes.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this specific issue.
At the time of this report, there is no known public exploit available for this vulnerability. However, it is crucial to apply the official fix as soon as possible to mitigate the risk of potential exploitation.
While a temporary workaround is available by disabling the ts4800_wdt module, it is strongly recommended to apply the official fix by updating the Kernel. Disabling the watchdog functionality may leave the system more vulnerable to failures or crashes.
For more detailed information about this vulnerability, including technical specifics and the official fix, you can refer to the vulnerability report on the Cloud Security Alliance's GSD database at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002983.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
