Vulnerability in phy: qcom-qmp Package - Struct Clk Leak on Probe Errors
Summary
GSD-2022-1003003: phy: qcom-qmp: fix struct clk leak on probe errors. Affects Kernel versions >= e78f3d15e115e8e764d4b1562b4fa538f2e22f6b, < f8d23895a41243c6a8dbf392e531fff9497bb023. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The phy: qcom-qmp package is a component of the Linux Kernel ecosystem. It provides support for Qualcomm QMP (Qualcomm Message Passing) PHYs. These PHYs are responsible for managing communication between different hardware components in Qualcomm SoCs (System-on-Chips). The package includes various functions and structures to handle the initialization and configuration of these PHYs.
Vulnerability Detail
The vulnerability in the phy: qcom-qmp package involves a struct clk leak on probe errors. When the package encounters errors during the probe process, it fails to properly release the allocated memory for the struct clk structure. This can lead to resource leaks and potential memory corruption issues. Although the impact and attack plausibility of this vulnerability have not been proven, it is important to address it to ensure the stability and security of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the phy: qcom-qmp package, involving a struct clk leak on probe errors, can potentially lead to resource leaks and memory corruption. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.17.14 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The phy: qcom-qmp package is a component of the Linux Kernel ecosystem that provides support for Qualcomm QMP PHYs, which manage communication between hardware components in Qualcomm SoCs.
The impact of this vulnerability is not yet proven, but it has the potential to cause resource leaks and memory corruption issues.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later, which includes the necessary fix commit.
You can obtain the updated Linux Kernel from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
No specific workaround has been provided for this vulnerability. It is recommended to apply the kernel update to address the issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
