NFC: digital: Fix Possible Memory Leak in digital_in_send_sdd_req()
Summary
GSD-2021-1001783: NFC: digital: fix possible memory leak in digital_in_send_sdd_req(). Affects Kernel versions >= 2c66daecc4092e6049673c281b2e6f0d5e59a94c, < 88c890b0b9a1fb9fcd01c61ada515e8b636c34f9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC (Near Field Communication) functionality in the Linux Kernel allows devices to communicate wirelessly when they are in close proximity. The digital module within the NFC subsystem handles digital communication. It is responsible for sending and receiving data packets. However, a vulnerability has been identified in the digital_in_send_sdd_req() function, which could lead to a memory leak. This function is used to send a Secure Digital Device (SDD) request. If not properly handled, this memory leak could result in resource exhaustion and potential denial-of-service attacks.
Vulnerability Detail
The vulnerability exists in the digital_in_send_sdd_req() function of the NFC digital module. When processing SDD requests, the function fails to release allocated memory, leading to a memory leak. An attacker could potentially exploit this vulnerability by sending a large number of SDD requests, causing the system to exhaust its available memory resources. This could result in a denial-of-service condition, impacting the availability of the affected system. The vulnerability was introduced in version v3.13 of the Linux Kernel and has been fixed in version v4.9.288.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.9.288 or later. This update includes the commit 88c890b0b9a1fb9fcd01c61ada515e8b636c34f9, which addresses the memory leak issue in the digital_in_send_sdd_req() function. Users can obtain the updated Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The NFC digital module in the Linux Kernel is vulnerable to a memory leak issue in the digital_in_send_sdd_req() function. This vulnerability could be exploited to exhaust system memory resources and cause denial-of-service conditions. It is recommended to update the Linux Kernel to version v4.9.288 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a wireless communication technology that allows devices to exchange data when they are in close proximity.
The digital module is responsible for handling digital communication within the NFC subsystem. It facilitates the transmission and reception of data packets.
The digital_in_send_sdd_req() function is a part of the digital module in the NFC subsystem. It is used to send Secure Digital Device (SDD) requests.
A memory leak occurs when allocated memory is not properly released, leading to a gradual loss of available memory resources.
The vulnerability could result in a memory leak, potentially leading to resource exhaustion and denial-of-service attacks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.