mISDN netjet: Fix crash in nj_probe
Summary
GSD-2021-1000868: isdn: mISDN: netjet: Fix crash in nj_probe:. Affects Kernel versions < bf78e25bd3f487208e042c67c8a31706c2dba265. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mISDN package is a part of the Linux Kernel ecosystem and provides support for ISDN (Integrated Services Digital Network) devices. It includes various drivers for different ISDN cards. One such driver is netjet, which is responsible for handling NetJet ISDN cards. These cards are used for connecting to ISDN networks and providing telephony services. However, a vulnerability has been discovered in the nj_probe function of the netjet driver, which can lead to a crash.
Vulnerability Detail
The vulnerability in the nj_probe function of the netjet driver can be triggered when the driver attempts to access invalid memory locations. This can occur due to improper input validation or uninitialized variables. An attacker could exploit this vulnerability by sending specially crafted input to the driver, causing it to access invalid memory and crash. The impact of this vulnerability could range from a denial of service (DoS) condition to potential privilege escalation if the attacker can control the input and manipulate the memory access. It is important to note that the actual impact and attack plausibility have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The mISDN netjet driver contains a vulnerability in the nj_probe function that can lead to a crash. Users should update their Linux Kernel to version v4.19.195 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mISDN is a part of the Linux Kernel ecosystem and provides support for ISDN devices. It includes various drivers for different ISDN cards.
The netjet driver is a driver included in the mISDN package and is responsible for handling NetJet ISDN cards.
The nj_probe function is a function within the netjet driver that is called during the initialization process to probe for NetJet ISDN cards and set up the necessary resources.
The impact of this vulnerability could range from a denial of service (DoS) condition to potential privilege escalation if the attacker can control the input and manipulate the memory access.
Yes, this vulnerability has been fixed in the Linux Kernel version v4.19.195 by commit bf78e25bd3f487208e042c67c8a31706c2dba265.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
