HID: bigben: fix slab-out-of-bounds Write in bigben_probe
Summary
GSD-2022-1003378: HID: bigben: fix slab-out-of-bounds Write in bigben_probe. Affects Kernel versions < 22e0b0b84c538b60bdf8eeceee7ab3cebf4a1a09. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The HID (Human Interface Device) bigben is a component of the Linux Kernel. It is responsible for handling input from various human interface devices such as keyboards, mice, and game controllers. The bigben_probe function is a part of the bigben driver, which is used to initialize and configure the bigben device. This vulnerability in the bigben_probe function can lead to a slab-out-of-bounds write, potentially causing memory corruption and system instability.
Vulnerability Detail
The vulnerability in the bigben_probe function arises from a slab-out-of-bounds write. This occurs when the driver attempts to write data beyond the boundaries of an allocated memory slab. An attacker could exploit this vulnerability by sending specially crafted input to the bigben device, triggering the out-of-bounds write and potentially gaining control over the affected system. The impact of this vulnerability includes potential system crashes, data corruption, and unauthorized access to sensitive information. It is important to note that the actual impact and attack plausibility have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The HID bigben driver in the Linux Kernel is vulnerable to a slab-out-of-bounds write in the bigben_probe function. This vulnerability can potentially lead to memory corruption, system crashes, and unauthorized access. It is crucial to update the Linux Kernel to version v5.15.46 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The bigben driver is a component of the Linux Kernel responsible for handling input from human interface devices such as keyboards, mice, and game controllers.
A slab-out-of-bounds write occurs when a driver attempts to write data beyond the boundaries of an allocated memory slab. This can lead to memory corruption and system instability.
An attacker can exploit this vulnerability by sending specially crafted input to the bigben device, triggering the out-of-bounds write and potentially gaining control over the affected system.
The potential consequences of this vulnerability include system crashes, data corruption, and unauthorized access to sensitive information.
No, the actual impact and attack plausibility of this vulnerability have not yet been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
