Null Pointer Dereference in tty: synclink_gt
Summary
GSD-2022-1002549: tty: synclink_gt: Fix null-pointer-dereference in slgt_clean(). Affects Kernel versions < 1ceb4ca9543a8a788febf6bc8dad2e605e172d5e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tty: synclink_gt package is a component of the Linux Kernel. It provides support for the SyncLink GT serial adapter. The package allows for communication between the computer and external devices through serial ports. However, a vulnerability has been discovered in the package that can lead to a null pointer dereference.
Vulnerability Detail
The null pointer dereference vulnerability in tty: synclink_gt, specifically in the slgt_clean() function, can be exploited by an attacker to cause a denial-of-service (DoS) condition. By sending specially crafted input to the affected system, an attacker can trigger the null pointer dereference, resulting in a system crash or hang. This vulnerability has the potential to disrupt the normal operation of the system and may require a reboot to recover.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update the Linux Kernel to the latest version.
Conclusion
The null pointer dereference vulnerability in tty: synclink_gt can lead to a denial-of-service condition on the affected system. It is crucial to update the Linux Kernel to version v5.18.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial-of-service (DoS) condition, causing the affected system to crash or hang.
An attacker can exploit this vulnerability by sending specially crafted input to the affected system, triggering the null pointer dereference and causing a system crash or hang.
Yes, this vulnerability has been fixed in Linux Kernel version v5.18.4 by commit 1ceb4ca9543a8a788febf6bc8dad2e605e172d5e.
The vulnerability is present in versions prior to v5.18.4. Users should update to the latest stable version to ensure the vulnerability is patched.
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update the Linux Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
