Vulnerability in iio: core: fix ioctl handlers removal
Summary
GSD-2021-1000192: iio: core: fix ioctl handlers removal. Affects Kernel versions >= 8dedcc3eee3aceb37832176f0a1b03d5687acda3, < ab6c935ba3a04317632f3b8b68675bdbaf395303. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iio (Industrial I/O) subsystem is a framework in the Linux kernel that provides support for devices that measure physical quantities, such as temperature, pressure, and acceleration. It allows applications to access and control these devices through various interfaces, including ioctl handlers. However, a vulnerability has been discovered in the iio core that affects the removal of ioctl handlers.
Vulnerability Detail
The vulnerability in the iio core relates to the removal of ioctl handlers. It was introduced in Linux Kernel version v5.11 by commit 8dedcc3eee3aceb37832176f0a1b03d5687acda3 and fixed in version v5.12.5 by commit ab6c935ba3a04317632f3b8b68675bdbaf395303. The impact and attack plausibility of this vulnerability have not yet been proven. Further details can be found in the references link provided.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, a vulnerability has been discovered in the iio core of the Linux Kernel that affects the removal of ioctl handlers. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.12.5 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The iio (Industrial I/O) subsystem is a framework in the Linux kernel that provides support for devices that measure physical quantities, such as temperature, pressure, and acceleration. It allows applications to access and control these devices through various interfaces.
The impact of this vulnerability is currently unknown as the actual attack plausibility has not been proven. However, it is important to update to the fixed version of the Linux Kernel to ensure the system is protected.
The process of updating the Linux Kernel depends on the specific Linux distribution being used. It typically involves using package management tools to install the updated kernel package. It is important to ensure compatibility and update any necessary dependencies.
No specific workaround has been mentioned for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.
More information about this vulnerability can be found in the references link provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
