mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
Summary
GSD-2022-1003949: mips: cpc: Fix refcount leak in mips_cpc_default_phys_base. Affects Kernel versions < bed702566dcdb6ebe300bc0c62bf3600cf4d5874. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mips_cpc_default_phys_base is a component in the Linux Kernel that handles the management of physical base addresses for the MIPS CPC (Co-Processor Cluster) architecture. It is responsible for maintaining reference counts for the physical base addresses. This vulnerability in the mips_cpc_default_phys_base component leads to a refcount leak, which can result in resource exhaustion and potential denial-of-service attacks.
Vulnerability Detail
The vulnerability in mips_cpc_default_phys_base allows for a refcount leak, which means that the reference count for a physical base address is not properly decremented when it should be. This can lead to a situation where the reference count becomes larger than expected, potentially causing resource exhaustion and denial-of-service attacks. The vulnerability has been fixed in Linux Kernel version v4.14.283 by commit bed702566dcdb6ebe300bc0c62bf3600cf4d5874.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in mips_cpc_default_phys_base has been fixed in Linux Kernel version v4.14.283. To ensure the security of the system, it is advised to update the Linux Kernel to the fixed version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mips_cpc_default_phys_base is a component in the Linux Kernel that handles the management of physical base addresses for the MIPS CPC architecture.
A refcount leak occurs when the reference count for a resource is not properly decremented, leading to potential resource exhaustion and denial-of-service attacks.
The refcount leak in mips_cpc_default_phys_base can result in resource exhaustion and potential denial-of-service attacks.
To fix this vulnerability, update the Linux Kernel to version v4.14.283 or later.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
