Vulnerability in Kernel Package: can: mcp251xfd: mcp251xfd_probe()
Summary
GSD-2021-1000210: can: mcp251xfd: mcp251xfd_probe(): fix an error pointer dereference in probe. Affects Kernel versions >= cf8ee6de2543a0fa6d9471ddbb7216464a9681a1, < 15f8f96ec7fc35024d4e03296e4d838fcea33d83. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system, responsible for managing the system's core functionality. It provides an interface between the hardware and software layers, allowing applications to communicate with the underlying hardware. The can: mcp251xfd module within the Kernel package is specifically designed for handling CAN (Controller Area Network) communication. It enables devices to exchange data over a CAN bus. However, a vulnerability has been identified in the mcp251xfd_probe() function of the can: mcp251xfd module.
Vulnerability Detail
The vulnerability in the mcp251xfd_probe() function of the can: mcp251xfd module can lead to an error pointer dereference during the probe process. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with kernel-level privileges. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v5.12 of the Linux Kernel and has been fixed in version v5.12.5 by commit 15f8f96ec7fc35024d4e03296e4d838fcea33d83.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the can: mcp251xfd module's mcp251xfd_probe() function poses a potential security risk. It is crucial to update the Linux Kernel package to the latest version to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a critical component of the Linux operating system that manages the system's core functionality.
The can: mcp251xfd module is a part of the Kernel package and is responsible for handling CAN communication.
The mcp251xfd_probe() function is a specific function within the can: mcp251xfd module that is used during the probe process.
This vulnerability could lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code with kernel-level privileges.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.12.5 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
