Global Out-of-Bounds Vulnerability in coresight: tmc-etf
Summary
GSD-2021-1001395: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer(). Affects Kernel versions >= 0c3fc4d5fa26092853278145aca9b21fa52a3e93, < 04bd77ef4f4d9fc6102023b85f4590fc2130aac5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The coresight: tmc-etf package is a component of the Linux Kernel, which is responsible for managing the trace buffer of the CoreSight Embedded Trace Funnel (ETF). The ETF is a hardware component that collects trace data from various sources in a system-on-chip (SoC) and stores it in a buffer for analysis. The tmc-etf module provides the necessary functionality to update the trace buffer. However, a global out-of-bounds vulnerability has been identified in the tmc_update_etf_buffer() function, which could potentially allow an attacker to overwrite memory beyond the bounds of the buffer.
Vulnerability Detail
The global out-of-bounds vulnerability in tmc-etf arises from a lack of proper bounds checking in the tmc_update_etf_buffer() function. By providing specially crafted input, an attacker could trigger a buffer overflow, leading to arbitrary code execution or a system crash. The vulnerability was introduced in version v4.14 of the Linux Kernel and was fixed in version v4.19.198. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the patch or update the Linux Kernel to mitigate the risk.
Conclusion
The global out-of-bounds vulnerability in coresight: tmc-etf can potentially allow an attacker to execute arbitrary code or crash the system. It is crucial to update the Linux Kernel to version v4.19.198 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The coresight: tmc-etf package is a component of the Linux Kernel that manages the trace buffer of the CoreSight Embedded Trace Funnel (ETF).
A global out-of-bounds vulnerability refers to a security flaw where a program accesses memory beyond the bounds of an allocated buffer, potentially leading to memory corruption or arbitrary code execution.
This vulnerability can be exploited by providing specially crafted input to the tmc_update_etf_buffer() function, triggering a buffer overflow and potentially allowing an attacker to execute arbitrary code or crash the system.
The impact and attack plausibility of this vulnerability have not been proven yet. However, it is still important to apply the necessary updates to mitigate any potential risks.
To fix this vulnerability, update the Linux Kernel to version v4.19.198 or later by applying the commit 04bd77ef4f4d9fc6102023b85f4590fc2130aac5 from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
