Memory Leak in smsc75xx_bind in Kernel
Summary
GSD-2021-1000695: net: usb: fix memory leak in smsc75xx_bind. Affects Kernel versions >= d0cad871703b898a442e4049c532ec39168e5b57, < 22c840596af0c09068b6cf948616e6496e59e07f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential services and functions for the proper functioning of the system. The smsc75xx_bind function in the USB subsystem of the Kernel is responsible for binding the SMSC75xx USB Ethernet device driver. This driver enables communication between the system and SMSC75xx USB Ethernet devices. However, a memory leak vulnerability has been identified in the smsc75xx_bind function.
Vulnerability Detail
The memory leak vulnerability in smsc75xx_bind allows an attacker to cause a continuous allocation of memory resources without proper deallocation. This can lead to a depletion of available memory, resulting in system instability or denial of service. The vulnerability was introduced in version v2.6.34 of the Linux Kernel and was fixed in version v4.9.271. The impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The memory leak vulnerability in smsc75xx_bind in the Kernel can lead to system instability or denial of service. It is crucial to update the Linux Kernel to version v4.9.271 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can include system instability or denial of service due to memory resource depletion.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will provide real-time alerts for open-source vulnerabilities, including this one.
There is no known exploit for this vulnerability at the moment. However, it is always recommended to apply security patches and updates to mitigate potential risks.
There may be other vulnerabilities in the Kernel that have not been discovered or reported yet. It is important to regularly update the Kernel and follow security best practices to minimize the risk of exploitation.
You can find more information about this vulnerability in the Cloud Security Alliance's GSD Database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000695.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
