Refcount Leak in ata: pata_octeon_cf
Summary
GSD-2022-1003523: ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe. Affects Kernel versions >= 43f01da0f2794b464ade2ffe1f780c69d7ce7b75, < 19cb3ece14547cb1ca2021798aaf49a3f82643d1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ata: pata_octeon_cf package is a component of the Linux Kernel, which is responsible for handling ATA devices. It provides support for the Octeon CompactFlash (CF) interface. The Octeon CF controller is used to connect CompactFlash cards to the system. This vulnerability affects versions of the Linux Kernel from v3.8 to v5.10.121. The vulnerability allows for a refcount leak in the octeon_cf_probe function.
Vulnerability Detail
The vulnerability in ata: pata_octeon_cf is caused by a refcount leak in the octeon_cf_probe function. This leak occurs when the function is called multiple times, resulting in an incorrect reference count for the CompactFlash device. An attacker could exploit this vulnerability to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to update their Linux Kernel to the fixed version.
Conclusion
The refcount leak vulnerability in ata: pata_octeon_cf can be fixed by updating the Linux Kernel to version v5.10.122 or later. It is important to regularly update the Linux Kernel to ensure the latest security patches are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ata: pata_octeon_cf is a component of the Linux Kernel that provides support for the Octeon CompactFlash (CF) interface.
The impact of this vulnerability is not yet proven, but it could potentially lead to a denial-of-service (DoS) condition or arbitrary code execution.
To fix this vulnerability, users should update their Linux Kernel to version v5.10.122 or later.
There is no known workaround for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you if your application is affected.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
