Null Pointer Dereference in iommu/mediatek Package
Summary
GSD-2022-1003319: iommu/mediatek: Fix NULL pointer dereference when printing dev_name. Affects Kernel versions >= 77fbe028d5a3f7fc6060c4454ead9510533acd1e, < c3c2734e28d7fac50228c4d2b8896e8695adf304. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/mediatek package is a component of the Linux Kernel that provides support for the MediaTek IOMMU (Input-Output Memory Management Unit) hardware. The IOMMU is responsible for managing memory access and translation between devices and the CPU. It ensures secure and efficient data transfers between devices and memory. The iommu/mediatek package is widely used in systems with MediaTek processors.
Vulnerability Detail
This vulnerability in the iommu/mediatek package involves a null pointer dereference when printing the device name. A null pointer dereference occurs when a program attempts to access or dereference a null pointer, resulting in a crash or undefined behavior. In this case, the vulnerability occurs when the device name is being printed, and if the name is null, it leads to a null pointer dereference. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The null pointer dereference vulnerability in the iommu/mediatek package can be fixed by updating the Linux Kernel to version v5.15.46 or later. It is important to promptly apply the fix to ensure the security and stability of systems utilizing the iommu/mediatek package. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a null pointer dereference, potentially resulting in a crash or undefined behavior. An attacker could exploit this to cause a denial-of-service (DoS) condition or execute arbitrary code with kernel privileges.
The vulnerability was introduced in Linux Kernel version v5.15.33 and is fixed in version v5.15.46.
There is no known exploit for this vulnerability at the moment.
The recommended mitigation is to update the Linux Kernel to the fixed version.
No, this vulnerability is specific to the iommu/mediatek package in the Linux Kernel and can affect systems using MediaTek processors.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
