isdn: mISDN: Fix sleeping function called from invalid context
Summary
GSD-2021-1001778: isdn: mISDN: Fix sleeping function called from invalid context. Affects Kernel versions < ef269a8808cb1759245a98a7fe16fceaebad894c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling Integrated Services Digital Network (ISDN) protocols. ISDN is a set of communication standards for transmitting voice, video, and data over digital telephone lines. The mISDN module within the isdn package provides a framework for ISDN drivers. This vulnerability in the mISDN module allows a sleeping function to be called from an invalid context, potentially leading to system instability or crashes.
Vulnerability Detail
The vulnerability in the mISDN module arises from the incorrect usage of a sleeping function in an invalid context. When a sleeping function is called from an invalid context, it can disrupt the normal flow of execution and cause issues such as deadlocks or memory corruption. An attacker may be able to exploit this vulnerability to crash the system or execute arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The isdn package in the Linux Kernel is vulnerable to a sleeping function being called from an invalid context in the mISDN module. This vulnerability can potentially lead to system instability or crashes. To mitigate the risk, it is recommended to update the Linux Kernel to version v4.9.288 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The isdn package is a component of the Linux Kernel that handles Integrated Services Digital Network (ISDN) protocols for transmitting voice, video, and data over digital telephone lines.
The mISDN module is a part of the isdn package and provides a framework for ISDN drivers in the Linux Kernel.
A sleeping function is a function that causes the calling thread to sleep or wait for a certain period of time. It is commonly used for synchronization or delaying execution.
An invalid context refers to a situation where a function is called from a context where it is not intended or allowed to be called. This can lead to unexpected behavior or system instability.
The vulnerability can potentially be exploited by an attacker to crash the system or execute arbitrary code with elevated privileges. However, the actual impact and attack plausibility have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
