Vulnerability in dmaengine: mediatek package
Summary
GSD-2021-1001141: dmaengine: mediatek: free the proper desc in desc_free handler. Affects Kernel versions < 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA controllers. These controllers are responsible for managing data transfers between different devices in a system. The package plays a crucial role in ensuring efficient and reliable data movement within a MediaTek-based system.
Vulnerability Detail
The vulnerability identified in the dmaengine: mediatek package involves the improper freeing of a descriptor in the desc_free handler. This flaw could potentially lead to memory corruption or other unexpected behavior. Although the impact and attack plausibility have not been proven, it is essential to address this vulnerability to maintain the integrity and security of the system. The vulnerability has been fixed in Linux Kernel version v5.13 by commit 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the dmaengine: mediatek package can potentially lead to memory corruption or unexpected behavior. It is crucial to update to the fixed version of the package to ensure the security and integrity of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA controllers, facilitating efficient data transfers between devices in a MediaTek-based system.
The impact of this vulnerability is not yet proven, but it could potentially lead to memory corruption or other unexpected behavior.
Yes, this vulnerability has been fixed in Linux Kernel version v5.13 by commit 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661.
Users can obtain the fixed version of the dmaengine: mediatek package from the official Linux Kernel repository.
No specific workaround has been mentioned for this vulnerability. It is recommended to update to the fixed version of the package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
