Vulnerability in soc/tegra: regulators in Linux Kernel
Summary
GSD-2021-1000307: soc/tegra: regulators: Fix locking up when voltage-spread is out of range. Affects Kernel versions >= 783807436f363e5b1ad4d43ba7debbedfcadbb99, < ff39adf5d31c72025bba799aec69c5c86d81d549. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The soc/tegra: regulators is a component in the Linux Kernel that handles voltage regulation for Tegra SoCs. It ensures that the voltage supplied to different components of the system remains within the specified range. However, a vulnerability has been discovered in this component that can cause the system to lock up when the voltage-spread is out of range.
Vulnerability Detail
The vulnerability in soc/tegra: regulators arises when the voltage-spread exceeds the acceptable range. This can lead to the system becoming unresponsive or freezing. An attacker could potentially exploit this vulnerability to cause a denial of service (DoS) by deliberately manipulating the voltage-spread. The vulnerability was introduced in Linux Kernel version v5.5 and has been fixed in version v5.12.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The soc/tegra: regulators component in the Linux Kernel is vulnerable to a DoS condition when the voltage-spread is out of range. It is recommended to update the Linux Kernel to version v5.12.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can cause the system to lock up or become unresponsive, leading to a denial of service (DoS) condition.
An attacker can manipulate the voltage-spread to exceed the acceptable range, causing the system to lock up.
The vulnerability was introduced in version v5.5 and fixed in version v5.12.4.
Yes, the vulnerability has been fixed in Linux Kernel version v5.12.4.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000307.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.