Refcount Leak in ti_dra7_xbar_route_allocate in dmaengine: ti
Summary
GSD-2022-1004713: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate. Affects Kernel versions >= ec9bfa1e1a796ef7acc2e55917c9b8be5a79e70e, < b31ab132561c7f1b6459039152b8d09e44eb3565. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: ti package is a component of the Linux Kernel that provides support for DMA (Direct Memory Access) engines on Texas Instruments (TI) devices. DMA engines allow for efficient data transfers between devices and memory without involving the CPU. The ti_dra7_xbar_route_allocate function is responsible for allocating resources for routing DMA transfers on TI DRA7 devices.
Vulnerability Detail
The ti_dra7_xbar_route_allocate function in dmaengine: ti suffers from a refcount leak vulnerability. This vulnerability was introduced in version v4.5 of the Linux Kernel and was fixed in version v5.4.205. The vulnerability occurs when the function fails to properly release a reference count, leading to a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources, resulting in a denial-of-service condition or other unexpected behavior.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the provided fix or update to the latest version of the Linux Kernel.
Conclusion
In conclusion, the dmaengine: ti package in the Linux Kernel is vulnerable to a refcount leak in the ti_dra7_xbar_route_allocate function. This vulnerability can potentially be exploited to exhaust system resources or cause unexpected behavior. It is crucial to update to the latest version of the Linux Kernel or apply the provided fix to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dmaengine: ti is a component of the Linux Kernel that provides support for DMA engines on Texas Instruments devices. It allows for efficient data transfers between devices and memory without involving the CPU.
ti_dra7_xbar_route_allocate is a function in dmaengine: ti that is responsible for allocating resources for routing DMA transfers on TI DRA7 devices.
A refcount leak vulnerability occurs when a reference count is not properly released, leading to a resource leak. In this case, the ti_dra7_xbar_route_allocate function fails to release a reference count, potentially causing a denial-of-service condition or other unexpected behavior.
The impact of this vulnerability can vary depending on the specific use case. However, it could potentially allow an attacker to exhaust system resources, leading to a denial-of-service condition or other unexpected behavior.
To fix this vulnerability, it is recommended to update to the latest version of the Linux Kernel (v5.4.205 or later) where the issue has been resolved. Alternatively, users can apply the specific commit (b31ab132561c7f1b6459039152b8d09e44eb3565) that fixes the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
