Vulnerability in sparcspkr Package - Refcount Leak in bbc_beep_probe
Summary
GSD-2022-1003035: Input: sparcspkr - fix refcount leak in bbc_beep_probe. Affects Kernel versions >= 9c1a5077fdca99356c891af37931e537dea874f5, < 73d6f42d8d86648bec2e73d34fe1648cb6d23e08. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sparcspkr package is a component of the Linux Kernel, specifically designed for the SPARC architecture. It provides functionality for generating beep sounds through the system speaker. The bbc_beep_probe function within the package is responsible for initializing the beep functionality. However, a refcount leak has been identified in this function, which can lead to potential security vulnerabilities.
Vulnerability Detail
The vulnerability arises from a refcount leak in the bbc_beep_probe function of the sparcspkr package. This leak can result in memory corruption or resource exhaustion, potentially leading to privilege escalation or denial of service attacks. The vulnerability was introduced in version v2.6.26 of the Linux Kernel and has been fixed in version v5.17.14. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of the Linux Kernel, there is no specific workaround available. It is advised to update the kernel to the latest version to mitigate the vulnerability.
Conclusion
In conclusion, the sparcspkr package in the Linux Kernel is vulnerable to a refcount leak in the bbc_beep_probe function. This vulnerability can lead to memory corruption or resource exhaustion, potentially enabling privilege escalation or denial of service attacks. It is crucial to update the Linux Kernel to version v5.17.14 or later to address this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The sparcspkr package is a component of the Linux Kernel that provides functionality for generating beep sounds through the system speaker.
The vulnerability can result in memory corruption or resource exhaustion, potentially leading to privilege escalation or denial of service attacks.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.14 or later, which includes the necessary patch.
As the vulnerability has been fixed in the latest version of the Linux Kernel, updating to the latest version is the recommended approach.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
