net: dsa: sja1105: add error handling in sja1105_setup()
Summary
GSD-2021-1000593: net: dsa: sja1105: add error handling in sja1105_setup(). Affects Kernel versions >= 0a7bdbc23d8a1d5e6f6f74abf00ba572f7369dd6, < dd8609f203448ca6d58ae71461208b3f6b0329b0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net package in the Linux Kernel is responsible for managing network functionality. It includes various drivers and protocols to enable network communication. One of the drivers in this package is the dsa driver, which is used for Distributed Switch Architecture (DSA) switches. The sja1105 driver is a specific driver within the dsa driver that handles the setup and configuration of sja1105 switches. This vulnerability specifically affects the sja1105_setup() function within the sja1105 driver.
Vulnerability Detail
The sja1105_setup() function in the sja1105 driver of the net package in the Linux Kernel lacks proper error handling. This means that if an error occurs during the setup process, it may not be properly handled, leading to potential issues or vulnerabilities. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.10.42 by commit dd8609f203448ca6d58ae71461208b3f6b0329b0. The vulnerability was introduced in version v5.10 by commit 0a7bdbc23d8a1d5e6f6f74abf00ba572f7369dd6.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The sja1105 driver in the net package of the Linux Kernel is vulnerable to a lack of error handling in the sja1105_setup() function. This vulnerability has been fixed in Linux Kernel version v5.10.42. It is recommended to update the kernel to the fixed version to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net package in the Linux Kernel is responsible for managing network functionality, including drivers and protocols for network communication.
The sja1105 driver is a specific driver within the dsa driver of the net package. It handles the setup and configuration of sja1105 switches.
The impact of this vulnerability is currently unknown as the attack plausibility has not been proven. However, it is important to apply the fix to ensure the security and stability of the system.
To fix this vulnerability, update the Linux Kernel to version v5.10.42 or later by pulling the latest updates from the official Linux Kernel repository and rebuilding the kernel.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
