Memory Leak in uss720_probe in Kernel
Summary
GSD-2021-1000710: misc/uss720: fix memory leak in uss720_probe. Affects Kernel versions >= 0f36163d3abefbda1b21a330b3fdf3c2dc076d94, < 5f46b2410db2c8f26b8bb91b40deebf4ec184391. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The uss720_probe function is a part of the Kernel's misc/uss720 module, which handles the initialization and probing of the USS720 USB device. This module is responsible for managing the USS720 USB device's communication with the system. Unfortunately, a memory leak vulnerability has been identified in the uss720_probe function.
Vulnerability Detail
The memory leak vulnerability in the uss720_probe function allows an attacker to cause a continuous allocation of memory without proper deallocation. This can lead to a depletion of available memory resources, resulting in system instability or even a denial-of-service condition. The vulnerability was introduced in version v2.6.14 of the Linux Kernel and has been present until version v4.4.271. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.4.271 or later. The fix for this vulnerability was implemented in commit 5f46b2410db2c8f26b8bb91b40deebf4ec184391. By applying the latest Kernel update, the memory leak issue in the uss720_probe function will be resolved.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to mitigate the risk of memory leaks in the uss720_probe function.
Conclusion
In conclusion, a memory leak vulnerability has been identified in the uss720_probe function of the Kernel's misc/uss720 module. This vulnerability can lead to memory resource depletion and potential system instability. To mitigate this risk, it is crucial to update the Linux Kernel to version v4.4.271 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a depletion of available memory resources, potentially causing system instability or a denial-of-service condition.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file, such as package-lock.json, and Vulert will analyze it for open-source vulnerabilities in real-time.
At the time of this report, there is no known exploit for this vulnerability. However, it is crucial to apply the recommended fix to prevent any potential exploitation.
The details regarding remote exploitation have not been determined yet. However, it is always advisable to keep your system up to date with the latest security patches to minimize the risk of remote exploitation.
The recommended solution is to update the Linux Kernel to the fixed version. There are no known alternative solutions to address this specific vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.