Vulnerability in Kernel package: usb: misc: brcmstb-usb-pinmap
Summary
GSD-2021-1001022: usb: misc: brcmstb-usb-pinmap: check return value after calling platform_get_resource(). Affects Kernel versions >= 517c4c44b32372d2fdf4421822e21083c45e89f9, < 2147684be1ebdaf845783139b9bc4eba3fecd9e4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services and interfaces for hardware communication, device drivers, and system resource management. The usb: misc: brcmstb-usb-pinmap vulnerability affects this package and specifically targets the brcmstb-usb-pinmap module. This module is responsible for handling USB pin mappings on Broadcom Set-Top Box (STB) platforms. The vulnerability arises from a failure to check the return value after calling platform_get_resource(), potentially leading to security issues.
Vulnerability Detail
The usb: misc: brcmstb-usb-pinmap vulnerability in the Kernel package allows for potential security exploits. By not properly checking the return value after calling platform_get_resource(), an attacker may be able to manipulate USB pin mappings on Broadcom STB platforms. This could result in unauthorized access, data leakage, or even remote code execution. The vulnerability was introduced in version v5.11 of the Linux Kernel and has been fixed in version v5.12.11.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official fix by updating the Kernel package to the recommended version.
Conclusion
The usb: misc: brcmstb-usb-pinmap vulnerability in the Kernel package poses a potential security risk on Broadcom STB platforms. It is crucial to update the Kernel package to version v5.12.11 or later to mitigate this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially allow attackers to manipulate USB pin mappings on Broadcom STB platforms, leading to unauthorized access, data leakage, or remote code execution.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time.
No, there is no known workaround. It is crucial to update the Kernel package to the recommended version.
There are no reported incidents related to this vulnerability at this time. However, it is still important to apply the fix to ensure system security.
You can find more information about the fix in the Linux Kernel repository. The fix was implemented in commit 2147684be1ebdaf845783139b9bc4eba3fecd9e4.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
