Null Pointer Dereference in pinctrl: renesas: rzn1
Summary
GSD-2022-1003357: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources(). Affects Kernel versions < c16b59d445135c8026a04e388d8b2762feaa3b3b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The pinctrl: renesas: rzn1 is a component in the Linux Kernel that provides pin control and GPIO functionality for Renesas RZ/N1 SoCs. It allows software to configure and manage the multiplexing of pins for various hardware peripherals. This vulnerability affects the pinctrl: renesas: rzn1 component in the Linux Kernel.
Vulnerability Detail
The vulnerability in pinctrl: renesas: rzn1 is a null pointer dereference issue that can lead to a crash or potential code execution. The specific function affected is sh_pfc_map_resources(). If a null pointer is passed as an argument to this function, it can result in a null pointer dereference, causing the program to crash. An attacker may be able to exploit this vulnerability to execute arbitrary code or cause a denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Conclusion
The pinctrl: renesas: rzn1 component in the Linux Kernel is vulnerable to a null pointer dereference issue. To mitigate this vulnerability, it is advised to update the Linux Kernel to version v5.15.46 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Pinctrl: renesas: rzn1 is a component in the Linux Kernel that provides pin control and GPIO functionality for Renesas RZ/N1 SoCs.
A null pointer dereference occurs when a program attempts to access or manipulate memory using a null pointer, resulting in a crash or potential code execution.
The vulnerability can lead to a crash or potential code execution, allowing an attacker to execute arbitrary code or cause a denial of service.
To fix this vulnerability, update the Linux Kernel to version v5.15.46 or later, which includes the necessary fix for the null pointer dereference issue.
There is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to apply the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
