Null Pointer Dereference in alcor_pci Package
Summary
GSD-2021-1001205: misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge. Affects Kernel versions < 09d154990ca82d14aed2b72796f6c8845e2e605d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The alcor_pci package is a component of the Linux Kernel, which is responsible for handling PCI bridges. PCI bridges are hardware devices that connect peripheral devices to the computer's motherboard. The alcor_pci package provides functionality for managing these bridges and ensuring proper communication between the peripherals and the system. However, a vulnerability has been discovered in the package that can lead to a null pointer dereference when there is no PCI bridge present.
Vulnerability Detail
The vulnerability in the alcor_pci package arises when the code attempts to access a null pointer, resulting in a null pointer dereference. This can occur when there is no PCI bridge detected in the system. An attacker could potentially exploit this vulnerability to cause a denial of service (DoS) by triggering the null pointer dereference and crashing the system. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The alcor_pci package in the Linux Kernel is vulnerable to a null pointer dereference when there is no PCI bridge present. This vulnerability can potentially be exploited to cause a denial of service (DoS) attack. Users should update their Linux Kernel to version v5.13.4 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The alcor_pci package is a component of the Linux Kernel that handles PCI bridges, which connect peripheral devices to the computer's motherboard.
A null pointer dereference occurs when a program attempts to access a memory address that is null (i.e., does not point to any valid memory location). This can lead to a crash or other unexpected behavior.
The impact of this vulnerability is a potential denial of service (DoS) attack, where an attacker can crash the system by triggering a null pointer dereference.
To fix this vulnerability, you should update your Linux Kernel to version v5.13.4 or later by downloading the updated kernel source code and compiling it.
No, there is no known exploit for this vulnerability at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
