Kernel: Prevent Kernel Crash when rmmod mtk-vcodec-dec.ko
Summary
GSD-2022-1002784: media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko. Affects Kernel versions < 1fa37b00dc55a061a3eb82e378849862b4aeca9d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The vulnerability in focus affects the media: mediatek: vcodec module, specifically the mtk-vcodec-dec.ko kernel module. This module is responsible for video decoding operations on MediaTek devices. The vulnerability can lead to a kernel crash when attempting to unload the mtk-vcodec-dec.ko module using the rmmod command.
Vulnerability Detail
The vulnerability arises due to an issue in the media: mediatek: vcodec module, which fails to handle the unloading of the mtk-vcodec-dec.ko module correctly. When the rmmod command is executed to remove the mtk-vcodec-dec.ko module, it triggers a kernel crash. This vulnerability can be exploited by an attacker with local access to the system to cause a denial-of-service (DoS) condition. The impact of this vulnerability includes system instability, loss of data, and potential privilege escalation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid unloading the mtk-vcodec-dec.ko module using the rmmod command. Instead, it is advisable to reboot the system to unload the module safely. This can be achieved by executing the 'reboot' command or using the system's reboot functionality.
Conclusion
The vulnerability in the media: mediatek: vcodec module, specifically the mtk-vcodec-dec.ko kernel module, can result in a kernel crash when attempting to unload the module. This can be exploited by an attacker with local access to the system, leading to system instability and potential privilege escalation. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.18.3 or later. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a kernel crash, causing system instability, potential data loss, and potential privilege escalation.
An attacker with local access to the system can exploit this vulnerability.
To fix this vulnerability, update the Linux Kernel to version v5.18.3 or later.
Yes, instead of using the rmmod command, reboot the system to safely unload the mtk-vcodec-dec.ko module.
For more information, refer to the provided references link and the source link in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
