HID: bigben: fix slab-out-of-bounds Write in bigben_probe
Summary
GSD-2022-1003080: HID: bigben: fix slab-out-of-bounds Write in bigben_probe. Affects Kernel versions < 2ab0a30f4f709f462d253bbb36fc64bb6de5a135. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) bigben is a component of the Linux Kernel, which is responsible for handling input devices such as keyboards, mice, and game controllers. It provides the necessary functionality to communicate with these devices and translate their input into actions within the operating system. The bigben_probe function is a part of this component and is responsible for initializing and configuring the bigben device. However, a vulnerability has been discovered in this function that can lead to a slab-out-of-bounds write.
Vulnerability Detail
The slab-out-of-bounds write vulnerability in the bigben_probe function allows an attacker to write beyond the allocated memory, potentially leading to memory corruption and arbitrary code execution. This vulnerability can be exploited by sending specially crafted input to the bigben device, triggering the out-of-bounds write. The impact of this vulnerability can vary depending on the attacker's intentions and the system's configuration, but it has the potential to compromise the integrity and security of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The HID bigben component in the Linux Kernel is vulnerable to a slab-out-of-bounds write in the bigben_probe function. This vulnerability can be exploited to achieve arbitrary code execution and compromise the security of the affected system. It is crucial to update the Linux Kernel to version v5.17.14 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's intentions and the system's configuration. However, it has the potential to compromise the integrity and security of the affected system by allowing arbitrary code execution.
You can check if your system is affected by this vulnerability by using the Vulert Playground at Vulert Scanner. Simply upload your package-lock.json file to the playground, and it will analyze your dependencies and alert you if any known vulnerabilities, including this one, are found.
At the moment, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the patched version as soon as possible.
Yes, this vulnerability can be exploited remotely by sending specially crafted input to the bigben device. However, the ability to exploit it depends on the attacker's access to the affected system and the network configuration.
There are no known instances of this vulnerability being exploited in the wild at the time of this report. However, it is important to apply the necessary updates to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
