Vulnerability in Kernel: Possible Resource Leak in icom_probe
Summary
GSD-2022-1003673: tty: Fix a possible resource leak in icom_probe. Affects Kernel versions < 8c014373f178a4f13a08e045ef63bdb23f62e892. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The vulnerability in question affects the icom_probe function within the tty subsystem of the Kernel. This function is responsible for handling the initialization and probing of ICOM devices, which are used for serial communication. The vulnerability could potentially lead to a resource leak, which may result in system instability or denial of service.
Vulnerability Detail
The vulnerability arises from a possible resource leak in the icom_probe function. If not properly handled, this resource leak can lead to memory or other resource exhaustion, potentially causing system instability or denial of service. An attacker could potentially exploit this vulnerability to exhaust system resources, leading to a system crash or disruption of service. It is important to note that the impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel's icom_probe function poses a potential risk of resource leak, which could lead to system instability or denial of service. It is crucial to update the Kernel to version v5.4.198 or a later version that includes the fix to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially lead to system instability or denial of service if exploited by an attacker.
You can use tools like Vulert (https://vulert.com) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
At the time of this report, there are no known exploits for this vulnerability. However, it is important to apply the recommended fix to mitigate any potential risks.
There is no specific workaround mentioned for this vulnerability. It is recommended to apply the fix provided in the updated Kernel version.
You can refer to the vulnerability details in the Open Source Vulnerability format provided by the Cloud Security Alliance's GSD database. The details include the vulnerability ID, affected package, fix version, and references for further information.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
