Vulnerability in Kernel package: USB: host: isp116x
Summary
GSD-2022-1003214: USB: host: isp116x: check return value after calling platform_get_resource(). Affects Kernel versions < 3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services and interfaces for hardware devices, including USB hosts. The isp116x driver within the Kernel package specifically handles USB host functionality. This vulnerability affects the isp116x driver and its interaction with the platform_get_resource() function.
Vulnerability Detail
The vulnerability arises from a failure to check the return value after calling the platform_get_resource() function in the isp116x driver. This oversight could lead to various security issues, although the exact impact and attack vectors have not been proven. It is crucial to note that this vulnerability has been fixed in Linux Kernel version v5.15.47 by commit 3592cfd8b848bf0c4d7740d78a87a7b8f6e1fa9a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in a later version of the Kernel package, there is no specific workaround available. Updating to the patched version is the recommended course of action.
Conclusion
The vulnerability in the Kernel package's isp116x driver can be mitigated by updating to version v5.15.47 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality.
The isp116x driver is a part of the Kernel package and handles USB host functionality.
The exact impact of this vulnerability is not yet proven. However, it could potentially lead to security issues.
To fix this vulnerability, update the Kernel package to version v5.15.47 or later.
No, there is no specific workaround available. Updating to the patched version is recommended.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
