mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
Summary
GSD-2022-1003228: mips: cpc: Fix refcount leak in mips_cpc_default_phys_base. Affects Kernel versions < 1699ec1bfb59304a788901474f6bb003f7831b61. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the operating system that manages system resources and provides an interface for applications to interact with the hardware. The mips_cpc_default_phys_base function in the mips_cpc driver is vulnerable to a refcount leak. This vulnerability can potentially lead to resource exhaustion and system instability.
Vulnerability Detail
The mips_cpc_default_phys_base function in the mips_cpc driver in the Kernel package suffers from a refcount leak. This can occur when the function fails to properly release a reference count on a resource, leading to a leak of system resources. An attacker could potentially exploit this vulnerability to exhaust system resources, resulting in a denial of service condition or other system instability. The vulnerability has been fixed in Linux Kernel version v5.15.47 by commit 1699ec1bfb59304a788901474f6bb003f7831b61.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The mips_cpc_default_phys_base function in the mips_cpc driver in the Kernel package is vulnerable to a refcount leak. This can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel package to version v5.15.47 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to resource exhaustion and system instability, resulting in a denial of service condition or other adverse effects on the affected system.
Yes, the vulnerability has been fixed in Linux Kernel version v5.15.47 by commit 1699ec1bfb59304a788901474f6bb003f7831b61.
No, there are no known workarounds for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.
The details of remote exploitation have not been provided. However, it is always recommended to apply security patches and updates to mitigate potential risks.
For more details about this vulnerability, you can refer to the source information available at: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003228.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
