Vulnerability in Kernel: char: tpm: cr50_i2c: Suppress duplicated error message in .remove()
Summary
GSD-2022-1003059: char: tpm: cr50_i2c: Suppress duplicated error message in .remove(). Affects Kernel versions < 78628b1be12d6a4002f3722bbbcbe2699a34245f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The specific vulnerability affects the char: tpm: cr50_i2c module within the Kernel. This module is responsible for handling communication with the Trusted Platform Module (TPM) over the cr50_i2c bus. The vulnerability in question pertains to duplicated error messages generated during the removal of the module.
Vulnerability Detail
The vulnerability in the char: tpm: cr50_i2c module allows for the generation of duplicated error messages when attempting to remove the module. This redundancy can lead to confusion and potentially mask other important error messages. While the impact and attack plausibility have not been proven, it is crucial to address this issue to maintain the integrity and reliability of the system. The vulnerability has been fixed in Linux Kernel version v5.17.14 by commit 78628b1be12d6a4002f3722bbbcbe2699a34245f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the char: tpm: cr50_i2c module of the Kernel, which caused duplicated error messages during module removal, has been addressed in Linux Kernel version v5.17.14. It is crucial to update the Kernel to this version or a later one to ensure the system's integrity and reliability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, the presence of duplicated error messages during module removal can cause confusion and potentially hide other important error messages.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities.
Yes, a patch has been released in Linux Kernel version v5.17.14. It is recommended to update to this version or a later one to fix the vulnerability.
There are no specific temporary measures mentioned for this vulnerability. It is advisable to update the Kernel as soon as possible to ensure the security and stability of the system.
You can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003059.json) for more information about this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
