Vulnerability in Linux Kernel: i2c: robotfuzz-osif: fix control-request directions
Summary
GSD-2021-1001108: i2c: robotfuzz-osif: fix control-request directions. Affects Kernel versions >= 83e53a8f120f2f273cf0ad717f5372ab79ac24fe, < 8ab0e49cc8eeabae4f31805e979173bb00ee472e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware interaction, process management, and system resource allocation. The i2c subsystem within the Linux Kernel facilitates communication with I2C devices, which are commonly used for interconnecting various components in embedded systems. The robotfuzz-osif module is a part of the i2c subsystem and is responsible for handling control requests. However, a vulnerability has been identified in the robotfuzz-osif module that affects the control-request directions, potentially leading to security issues.
Vulnerability Detail
The vulnerability in the robotfuzz-osif module of the Linux Kernel's i2c subsystem arises from incorrect control-request directions. This flaw could be exploited by an attacker to manipulate control requests and potentially gain unauthorized access or perform malicious actions. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.14.238 by commit 8ab0e49cc8eeabae4f31805e979173bb00ee472e. However, it was introduced in version v3.14 by commit 83e53a8f120f2f273cf0ad717f5372ab79ac24fe.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, a vulnerability has been discovered in the robotfuzz-osif module of the Linux Kernel's i2c subsystem. This vulnerability can potentially be exploited to gain unauthorized access or perform malicious actions. It is crucial to update the Linux Kernel to version v4.14.238 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, if successfully exploited, an attacker could gain unauthorized access or perform malicious actions.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it in real-time.
No specific workarounds have been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
The vulnerability was introduced in version v3.14 of the Linux Kernel and is fixed in version v4.14.238.
You can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001108.json) for more information.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
