Vulnerability in Kernel package: Possible resource leak in icom_probe
Summary
GSD-2022-1003478: tty: Fix a possible resource leak in icom_probe. Affects Kernel versions < cb7147afd328c07edeeee287710d8d96ac0459f5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for communication between hardware and software. The icom_probe function is responsible for probing and initializing the ICOM serial driver in the Kernel. This vulnerability in icom_probe could potentially lead to a resource leak, which may have security implications.
Vulnerability Detail
The vulnerability in icom_probe arises from a possible resource leak. If not properly handled, this could result in the exhaustion of system resources, leading to performance degradation or denial of service. An attacker may be able to exploit this vulnerability to cause instability or disrupt the normal operation of the system. The vulnerability has been identified and fixed in Linux Kernel version v5.10.122 by commit cb7147afd328c07edeeee287710d8d96ac0459f5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Kernel package.
Conclusion
The vulnerability in the Kernel package, specifically in the icom_probe function, could potentially lead to resource leaks and subsequent performance degradation or denial of service. It is crucial to update the Kernel package to version v5.10.122 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially lead to resource exhaustion, causing performance degradation or denial of service.
An attacker may exploit this vulnerability to disrupt the normal operation of the system or cause instability.
Yes, the vulnerability has been fixed in Linux Kernel version v5.10.122 by commit cb7147afd328c07edeeee287710d8d96ac0459f5.
You can update the Kernel package by following the update process provided by your Linux distribution or by manually compiling and installing the updated Kernel source code.
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Kernel package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
