Vulnerability in Kernel: soc: bcm: Check for NULL return of devm_kzalloc()

Background

The Kernel is a crucial component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The vulnerability in question affects the soc: bcm module within the Kernel. This module is responsible for handling Broadcom System-on-Chip (SoC) devices. Broadcom SoCs are widely used in various devices, including routers, switches, and IoT devices. The vulnerability arises from a failure to check for a NULL return value of the devm_kzalloc() function, which is used for memory allocation. This oversight can lead to potential security vulnerabilities and exploitation.

Vulnerability Detail

The vulnerability stems from the soc: bcm module's failure to properly handle the NULL return value of the devm_kzalloc() function. When devm_kzalloc() fails to allocate memory, it returns NULL. However, the code does not check for this NULL return value, assuming that memory allocation is always successful. This can result in subsequent code execution with a NULL pointer, leading to crashes, privilege escalation, or other security issues. Attackers may be able to exploit this vulnerability to execute arbitrary code or gain elevated privileges on affected systems. The vulnerability was introduced in version v5.12 of the Linux Kernel and has been fixed in version v5.17.14.

Workaround

As a workaround, users can apply a patch or modify the code to include a check for the NULL return value of devm_kzalloc(). Here is an example of the modified code:

/* Original code */
ptr = devm_kzalloc(dev, size, GFP_KERNEL);

/* Modified code */
ptr = devm_kzalloc(dev, size, GFP_KERNEL);
if (!ptr) {
    /* Handle allocation failure */
    return -ENOMEM;
}

By adding the check and appropriate error handling, the vulnerability can be mitigated. However, it is recommended to apply the official fix by updating the Kernel to the latest version.

Conclusion

The vulnerability in the soc: bcm module of the Linux Kernel can potentially lead to security issues, including arbitrary code execution and privilege escalation. It is crucial to update the Kernel to version v5.17.14 or later to mitigate this vulnerability. Applying the official fix is recommended, although a workaround involving code modification is available. Regularly monitoring for vulnerabilities using tools like Vulert can help ensure the security of your software.

See every vulnerability recorded for Kernel →

FAQ