Refcount Leaks in net: ethernet: ti: am65-cpsw-nuss
Summary
GSD-2022-1003282: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks. Affects Kernel versions >= b1f66a5bee07adaab218fb98800928185e5f0f18, < a4b7ef3b159805ba6be061d0cd2403d84b9b0063. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: ethernet: ti: am65-cpsw-nuss package is a component of the Linux Kernel. It provides support for the AM65x CPSW NUSS Ethernet subsystem. This subsystem is responsible for managing Ethernet communication on AM65x SoCs. The vulnerability in this package relates to refcount leaks, which can lead to resource leaks and potential memory corruption.
Vulnerability Detail
The vulnerability in net: ethernet: ti: am65-cpsw-nuss is caused by refcount leaks. When certain operations are performed, the package fails to properly release references to resources, resulting in a refcount leak. This can lead to resource leaks and potential memory corruption. An attacker may be able to exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code with elevated privileges. The vulnerability was introduced in version v5.8 of the Linux Kernel and has been fixed in version v5.15.47.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The net: ethernet: ti: am65-cpsw-nuss package in the Linux Kernel is vulnerable to refcount leaks, which can result in resource leaks and potential memory corruption. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.15.47 or later. This update includes the necessary fix to address the refcount leaks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
net: ethernet: ti: am65-cpsw-nuss is a package in the Linux Kernel that provides support for the AM65x CPSW NUSS Ethernet subsystem. It manages Ethernet communication on AM65x SoCs.
A refcount leak occurs when a program fails to properly release references to resources. This can lead to resource leaks and potential memory corruption.
The vulnerability in net: ethernet: ti: am65-cpsw-nuss can be exploited by an attacker to cause a denial-of-service condition or execute arbitrary code with elevated privileges.
To protect your system, it is recommended to update the Linux Kernel to version v5.15.47 or later, which includes the fix for this vulnerability.
Yes, this vulnerability has been fixed in version v5.15.47 of the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
