Fix resource leaks in mtk_phy_init() in Kernel
Summary
GSD-2021-1000992: phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init(). Affects Kernel versions < 9a17907946232d01aa2ec109da5f93b8d31dd425. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The mtk_phy_init() function is a part of the phy-mtk-tphy module in the Kernel. This function is responsible for initializing the MediaTek TPHY (Transceiver PHY) driver. The TPHY driver handles the physical layer communication for MediaTek SoCs (System-on-Chips) and is used in various devices such as smartphones, tablets, and IoT devices.
Vulnerability Detail
The mtk_phy_init() function in the phy-mtk-tphy module has been found to have some resource leaks. Resource leaks occur when system resources, such as memory or file handles, are not properly released after use. These leaks can lead to a gradual depletion of available resources, potentially causing system instability or denial of service. An attacker may be able to exploit these resource leaks to exhaust system resources, leading to a system crash or other adverse effects. The vulnerability has been fixed in Linux Kernel version v5.10.46 by commit 9a17907946232d01aa2ec109da5f93b8d31dd425.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The mtk_phy_init() function in the phy-mtk-tphy module of the Linux Kernel has been found to have resource leaks. These leaks can potentially lead to resource exhaustion and system instability. It is crucial to update the Kernel to the fixed version (v5.10.46 or later) to mitigate these risks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to resource exhaustion, system instability, or denial of service. It is important to update the Kernel to the fixed version to mitigate these risks.
The details of remote exploitation are not provided in the vulnerability report. However, it is always recommended to keep the Kernel up to date to protect against potential remote attacks.
There is no information available regarding any known instances of this vulnerability being exploited in the wild.
The vulnerability report does not provide a CVSS score. It is advisable to consult the official Linux Kernel security advisories for more detailed information.
For more information about this vulnerability, you can refer to the vulnerability report in the GSD database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000992.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
