Vulnerability in dmaengine: mediatek package
Summary
GSD-2021-1001117: dmaengine: mediatek: free the proper desc in desc_free handler. Affects Kernel versions < 3d995587c3ea335ad828b24592c89fdee013815f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA engines. These engines enable efficient data transfers between different devices in a system. The package is widely used in various Linux-based systems and is an integral part of the kernel.
Vulnerability Detail
The vulnerability identified in dmaengine: mediatek package involves improper handling of memory deallocation in the desc_free handler. This flaw could potentially lead to memory corruption or other security issues. An attacker may be able to exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been fully proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in dmaengine: mediatek package has been identified and addressed in the Linux Kernel version v5.4.129. Users are advised to update their kernel to this version or a later one that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA engines, facilitating efficient data transfers between devices.
The impact of this vulnerability is not fully proven, but it could potentially lead to memory corruption, arbitrary code execution, or denial-of-service attacks.
Yes, the vulnerability has been fixed in the Linux Kernel version v5.4.129 by commit 3d995587c3ea335ad828b24592c89fdee013815f.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.4.129 or a later version that includes the fix.
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
