Null Return Check Vulnerability in soc: ti: ti_sci_pm_domains
Summary
GSD-2022-1003056: soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc. Affects Kernel versions < c4e188869406b47ac3350920bf165be303cb1c96. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The soc: ti: ti_sci_pm_domains package is a component of the Linux Kernel, which is responsible for managing power domains in Texas Instruments (TI) System Control Interface (SCI). It provides functions and APIs for controlling and configuring power domains in TI devices. This vulnerability specifically affects the devm_kcalloc function within the package.
Vulnerability Detail
The vulnerability in soc: ti: ti_sci_pm_domains arises from a lack of null return check in the devm_kcalloc function. This function is used for allocating memory for an array of objects with managed resources. Without proper null return check, if the allocation fails, subsequent operations relying on the allocated memory can lead to unexpected behavior, including crashes or privilege escalation attacks. This vulnerability has the potential to be exploited by an attacker with local access to the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is advised to update the Linux Kernel to the fixed version as mentioned in the 'how_to_fix' section.
Conclusion
The null return check vulnerability in soc: ti: ti_sci_pm_domains package can lead to unexpected behavior and potential security risks. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The soc: ti: ti_sci_pm_domains package is a component of the Linux Kernel responsible for managing power domains in Texas Instruments (TI) System Control Interface (SCI). It provides functions and APIs for controlling and configuring power domains in TI devices.
The vulnerability can lead to unexpected behavior, including crashes or privilege escalation attacks. An attacker with local access to the affected system can potentially exploit this vulnerability.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later, which includes the necessary fix for the null return check in the devm_kcalloc function.
No specific workaround is provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
For more information about this vulnerability, you can refer to the source link: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003056.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
