Memory leaks in EVT_TRANSACTION handling in nfc: st21nfca
Summary
GSD-2022-1004038: nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling. Affects Kernel versions >= 26fc6c7f02cb26c39c4733de3dbc3c0646fc1074, < 593773088d615a46a42c97e01a0550d192bb7f74. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfc: st21nfca package is a component of the Linux Kernel that provides support for Near Field Communication (NFC) devices using the ST21NFCA chip. NFC enables short-range communication between devices, allowing for contactless transactions and data exchange. The st21nfca driver in the Linux Kernel handles the communication with the ST21NFCA chip and provides the necessary functionality for NFC operations.
Vulnerability Detail
The vulnerability identified in the nfc: st21nfca package relates to memory leaks in the handling of EVT_TRANSACTION events. When processing these events, the driver fails to release allocated memory, leading to memory leaks over time. This can result in resource exhaustion and potential system instability. An attacker may be able to exploit this vulnerability to exhaust system resources, leading to a denial-of-service condition or other malicious activities.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can consider implementing additional resource management measures to mitigate the impact of potential memory leaks. This may include monitoring system resources, setting resource limits, or implementing proper error handling mechanisms in applications that utilize the nfc: st21nfca package.
Conclusion
The memory leaks in EVT_TRANSACTION handling in the nfc: st21nfca package pose a potential security risk due to resource exhaustion and system instability. It is crucial to update the Linux Kernel to the recommended version to address this vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The nfc: st21nfca package is a component of the Linux Kernel that provides support for Near Field Communication (NFC) devices using the ST21NFCA chip.
This vulnerability can lead to memory leaks, resource exhaustion, and potential system instability. It may allow attackers to perform denial-of-service attacks or other malicious activities.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.9.318 or later, which includes a commit that addresses the memory leaks. Users can obtain the updated kernel from the official Linux Kernel repository.
While no specific workarounds are mentioned, users can consider implementing additional resource management measures to mitigate the impact of potential memory leaks.
For more information about this vulnerability, you can refer to the vulnerability details in the Open Source Vulnerability format or consult the official Linux Kernel documentation and community resources.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
