Memory Leak Vulnerability in mcba_usb Package
Summary
GSD-2021-1001077: can: mcba_usb: fix memory leak in mcba_usb. Affects Kernel versions >= 51f3baad7de943780ce0c17bd7975df567dd6e14, < d0760a4ef85697bc756d06eae17ae27f3f055401. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mcba_usb package is a component of the Linux Kernel, which is responsible for handling communication with MCBA (Modular CAN Bus Analyzer) USB devices. It provides the necessary drivers and functionality for interacting with these devices. The package is widely used in systems that require CAN bus analysis and monitoring.
Vulnerability Detail
The identified vulnerability in the mcba_usb package is a memory leak issue. Specifically, when the package is used, it fails to properly release allocated memory, leading to a gradual accumulation of memory over time. This can result in resource exhaustion, system instability, and potential denial-of-service attacks. The vulnerability was introduced in version v4.12 of the Linux Kernel and has been fixed in version v5.12.13.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leak vulnerability in the mcba_usb package can have serious consequences, including resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.12.13 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mcba_usb package is a component of the Linux Kernel that facilitates communication with MCBA USB devices for CAN bus analysis and monitoring.
The memory leak vulnerability in mcba_usb can lead to resource exhaustion, system instability, and potential denial-of-service attacks.
The vulnerability was introduced in version v4.12 of the Linux Kernel and is present in all versions prior to v5.12.13.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.12.13 or later.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
