Vulnerability in Kernel package: Input: sparcspkr - fix refcount leak in bbc_beep_probe
Summary
GSD-2022-1003757: Input: sparcspkr - fix refcount leak in bbc_beep_probe. Affects Kernel versions >= 9c1a5077fdca99356c891af37931e537dea874f5, < bbc2b0ce6042dd3117827f10ea8cb67e0ab786da. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and acts as a bridge between the hardware and software layers. The sparcspkr module within the Kernel package is responsible for handling the system speaker on SPARC-based systems. It allows generating beeping sounds for various system events. However, a vulnerability has been discovered in the bbc_beep_probe function of the sparcspkr module, leading to a reference count leak.
Vulnerability Detail
The vulnerability in the bbc_beep_probe function of the sparcspkr module results in a refcount leak. This can potentially lead to resource exhaustion and impact system stability. An attacker may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition or potentially execute arbitrary code with elevated privileges. The vulnerability was introduced in version v2.6.26 of the Linux Kernel and has been fixed in version v5.4.198.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.4.198 or later. This update includes the commit bbc2b0ce6042dd3117827f10ea8cb67e0ab786da, which addresses the refcount leak in the bbc_beep_probe function. Updating the Kernel package ensures that the vulnerability is patched and the system is protected.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the Kernel package is vulnerable to a refcount leak in the bbc_beep_probe function of the sparcspkr module. This vulnerability can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel package to version v5.4.198 or later to mitigate the risk. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion and system instability. It may also allow attackers to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges.
The vulnerability was introduced in version v2.6.26 of the Linux Kernel. All versions between v2.6.26 and v5.4.197 are potentially affected.
Yes, the vulnerability has been fixed in version v5.4.198 of the Linux Kernel. It is recommended to update to this version or later to mitigate the risk.
At the time of this report, no known exploits have been reported for this vulnerability. However, it is important to apply the recommended patch to prevent any potential exploitation.
For more detailed information about this vulnerability, you can refer to the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.