Vulnerability in driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction
Summary
GSD-2022-1003525: driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction. Affects Kernel versions >= 35a672363ab3e8dfe4ebcadb4dd0b2d06bb85ebe, < 71cbce75031aed26c72c2dc8a83111d181685f1b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The driver core is a fundamental component of the Linux Kernel that manages device drivers. It provides an interface for device drivers to register with the kernel and handles device initialization, probing, and removal. The driver core plays a crucial role in the functioning of various hardware devices in a Linux system.
Vulnerability Detail
The vulnerability identified in the driver core relates to the interaction between the wait_for_device_probe() function and the deferred_probe_timeout mechanism. The wait_for_device_probe() function is responsible for waiting until a device probe is complete, while the deferred_probe_timeout mechanism allows delaying the probing of certain devices. However, there is an issue in the interaction between these two components, which can lead to unexpected behavior and potential security vulnerabilities. The exact impact and attack vectors of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the driver core related to the wait_for_device_probe() function and deferred_probe_timeout interaction has been identified and fixed in the Linux Kernel version v5.10.122. It is crucial to update the Linux Kernel to the fixed version to mitigate any potential security risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The driver core is a fundamental component of the Linux Kernel that manages device drivers. It provides an interface for device drivers to register with the kernel and handles device initialization, probing, and removal.
The wait_for_device_probe() function is responsible for waiting until a device probe is complete. It is used to synchronize the driver initialization process with the device probing process.
The deferred_probe_timeout mechanism allows delaying the probing of certain devices. It can be used to handle devices that require additional setup or initialization before they can be probed.
The exact impact of this vulnerability is not yet proven. However, it has the potential to introduce security vulnerabilities and unexpected behavior in the driver core, which could be exploited by attackers.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.122 or later. This can be done by obtaining the updated kernel source code and compiling it for the target system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
