Refcount Leak in rockchip_grf_init in Kernel
Summary
GSD-2022-1002636: soc: rockchip: Fix refcount leak in rockchip_grf_init. Affects Kernel versions >= 4c58063d4258f6beb4fd5647db6b58f49e337c8f, < 8f64e84924604bb969ee1fbc4b8d7d09b9214889. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between hardware and software. It provides essential services and functions for the proper functioning of the system. The rockchip_grf_init function is a part of the Kernel's rockchip subsystem, specifically designed for Rockchip SoCs. This function initializes the Rockchip General Register Files (GRF) and manages the reference count for the GRF. The GRF is responsible for controlling various hardware settings and configurations on Rockchip SoCs.
Vulnerability Detail
The rockchip_grf_init function in the Kernel suffers from a refcount leak vulnerability. This vulnerability was introduced in version v4.11 of the Kernel and was fixed in version v5.18.4. The vulnerability occurs when the rockchip_grf_init function fails to properly release the reference count of the GRF, leading to a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources, resulting in a denial-of-service (DoS) condition or other unpredictable behavior.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.18.4 or later. The fix for this vulnerability was implemented in commit 8f64e84924604bb969ee1fbc4b8d7d09b9214889. Updating the Kernel to the latest version ensures that the refcount leak in rockchip_grf_init is addressed.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Kernel to the fixed version to mitigate the risk.
Conclusion
The refcount leak vulnerability in rockchip_grf_init in the Kernel can potentially lead to a denial-of-service (DoS) condition or other unpredictable behavior. It is crucial to update the Kernel to version v5.18.4 or later to mitigate this vulnerability. No known workaround is available, and it is recommended to reach out to DevNack.com for further support on vulnerability remediation.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to a denial-of-service (DoS) condition or other unpredictable behavior by exhausting system resources.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
At the time of this report, there is no known exploit for this vulnerability. However, it is still recommended to update the Kernel to the fixed version to mitigate any potential risks.
This vulnerability can be exploited on systems running Linux Kernel versions v4.11 to v5.18.3. Updating the Kernel to version v5.18.4 or later will address this vulnerability.
For further support on vulnerability remediation, you can reach out to info@devnack.com. They can provide guidance and assistance in addressing this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.