ARM: versatile: Add missing of_node_put in dcscb_init
Summary
GSD-2022-1003736: ARM: versatile: Add missing of_node_put in dcscb_init. Affects Kernel versions < fcd1999ba97445a12cc394f5f42ffd9116bf0185. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ARM versatile package is a part of the Linux Kernel ecosystem. It provides support for the ARM Versatile platform, which includes versatilepb, versatileab, and vexpress configurations. The package includes various drivers and configurations for these platforms. One of the components in this package is the dcscb_init function, which initializes the Device Configuration Space Control Block (DCSCB) for the ARM Versatile platform. This function is responsible for setting up the necessary data structures and configurations for the DCSCB. However, there is a missing of_node_put call in the dcscb_init function, which can lead to a memory leak.
Vulnerability Detail
The vulnerability in the ARM versatile package arises from the missing of_node_put call in the dcscb_init function. This missing call can result in a memory leak, where the memory allocated for the device tree node is not properly released. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial of service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ARM versatile package contains a vulnerability in the dcscb_init function, which can result in a memory leak. It is recommended to update to Linux Kernel version v5.4.198 or a later version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ARM versatile package is a part of the Linux Kernel ecosystem and provides support for the ARM Versatile platform.
The dcscb_init function is a component of the ARM versatile package and is responsible for initializing the Device Configuration Space Control Block (DCSCB) for the ARM Versatile platform.
The impact of the vulnerability is a potential memory leak, which can lead to a denial of service condition if system memory resources are exhausted.
No, the impact and attack plausibility of the vulnerability have not been proven yet.
To fix the vulnerability, update to Linux Kernel version v5.4.198 or a later version, which includes the fix for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
