mISDN: Use-after-free vulnerability in HFC_cleanup()
Summary
GSD-2021-1001432: mISDN: fix possible use-after-free in HFC_cleanup(). Affects Kernel versions < 7867ddc5f3de7f289aee63233afc0df4b62834c5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mISDN is a module in the Linux Kernel that provides support for ISDN (Integrated Services Digital Network) devices. It allows communication between the computer and ISDN hardware, enabling various telephony services. The HFC_cleanup() function is responsible for cleaning up resources associated with the HFC (Hybrid Function Chip) device. However, a use-after-free vulnerability has been discovered in this function, which could potentially be exploited by an attacker.
Vulnerability Detail
The use-after-free vulnerability in HFC_cleanup() occurs when the function attempts to access memory that has already been freed. This can lead to a crash or potentially allow an attacker to execute arbitrary code. The vulnerability has not been proven to have a specific impact or attack scenario yet. It has been fixed in Linux Kernel version v4.14.240 by commit 7867ddc5f3de7f289aee63233afc0df4b62834c5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use-after-free vulnerability in the HFC_cleanup() function of mISDN in the Linux Kernel has been fixed in version v4.14.240. It is recommended to update the kernel to ensure the security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mISDN is a module in the Linux Kernel that provides support for ISDN devices, allowing communication between the computer and ISDN hardware.
HFC_cleanup() is a function in mISDN responsible for cleaning up resources associated with the HFC (Hybrid Function Chip) device.
A use-after-free vulnerability occurs when a program attempts to access memory that has already been freed. This can lead to crashes or potentially allow an attacker to execute arbitrary code.
The impact of this vulnerability is not yet proven. However, it could potentially lead to crashes or allow an attacker to execute arbitrary code.
To fix this vulnerability, update the Linux Kernel to version v4.14.240 or later. Pull the latest changes from the official Linux Kernel repository and rebuild the kernel, or wait for your Linux distribution to release an updated package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
