Access to Variable DT Array in iio: sx9310
Summary
GSD-2021-1000308: iio: sx9310: Fix access to variable DT array. Affects Kernel versions >= 5b19ca2c78a0838976064c0347e46a2c859b541d, < 99f8854ad3dadda15fd46deca57fc9205f888980. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iio: sx9310 is a driver in the Linux Kernel that provides support for the SX9310 proximity and ambient light sensor. This driver allows applications to interact with the sensor and retrieve data related to proximity and ambient light levels. The vulnerability in this driver arises from improper access to a variable DT array, which can lead to potential security issues.
Vulnerability Detail
The vulnerability in the iio: sx9310 driver is caused by a flaw in accessing a variable DT array. This flaw can be exploited by an attacker to manipulate the array and potentially execute arbitrary code or cause a denial of service. The vulnerability was introduced in version v5.11 of the Linux Kernel and is fixed in version v5.12.4. It is important to update to the fixed version to mitigate the risk of exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The iio: sx9310 driver in the Linux Kernel is vulnerable to improper access to a variable DT array. This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service. It is crucial to update the Linux Kernel to version v5.12.4 or later to mitigate the risk of exploitation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service by manipulating the variable DT array.
You can check the version of the Linux Kernel installed on your system. If it is version v5.11 or later, your system may be affected. It is recommended to update to version v5.12.4 or later to mitigate the vulnerability.
There are no known exploits for this vulnerability at the moment. However, it is important to update to the fixed version of the Linux Kernel to prevent potential exploitation.
Yes, this vulnerability can be exploited remotely if the affected system is accessible over a network. It is crucial to update the Linux Kernel to the fixed version to prevent remote exploitation.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
