Null Pointer Dereference in tty: synclink_gt
Summary
GSD-2022-1003675: tty: synclink_gt: Fix null-pointer-dereference in slgt_clean(). Affects Kernel versions < f6e07eb7ebec53ffe81fc2489589320fbe4a6b75. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tty: synclink_gt package is a component of the Linux Kernel that provides support for synchronous serial communication devices. It includes drivers for Synclink GT cards, which are used for connecting serial devices to a computer. These drivers allow the operating system to communicate with the Synclink GT cards and handle data transmission and reception. However, a vulnerability has been discovered in the package that can lead to a null pointer dereference.
Vulnerability Detail
The null pointer dereference vulnerability in tty: synclink_gt, specifically in the slgt_clean() function, allows an attacker to trigger a null pointer dereference by sending specially crafted input to the affected system. This can result in a system crash or potentially allow the attacker to execute arbitrary code with kernel privileges. The vulnerability has been assigned the ID GSD-2022-1003675 and is fixed in Linux Kernel version v5.4.198 by commit f6e07eb7ebec53ffe81fc2489589320fbe4a6b75.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The null pointer dereference vulnerability in tty: synclink_gt can lead to system crashes or potential code execution with kernel privileges. It is crucial to update the Linux Kernel to version v5.4.198 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
tty: synclink_gt is a component of the Linux Kernel that provides support for synchronous serial communication devices, specifically Synclink GT cards.
A null pointer dereference occurs when a program attempts to access or manipulate memory using a null pointer, which does not point to a valid memory location. This can lead to a crash or potentially allow an attacker to execute arbitrary code.
The vulnerability can be exploited by sending specially crafted input to the affected system, triggering a null pointer dereference in the slgt_clean() function of tty: synclink_gt.
The potential consequences of this vulnerability include system crashes and the possibility of an attacker executing arbitrary code with kernel privileges.
Yes, the vulnerability has been fixed in Linux Kernel version v5.4.198 by commit f6e07eb7ebec53ffe81fc2489589320fbe4a6b75. It is recommended to update the Linux Kernel to this version or later to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
