isdn: mISDN: Fix sleeping function called from invalid context
Summary
GSD-2021-1001788: isdn: mISDN: Fix sleeping function called from invalid context. Affects Kernel versions < 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling Integrated Services Digital Network (ISDN) functionality. ISDN is a set of communication standards for transmitting voice, video, and data over digital telephone lines. The mISDN module within the isdn package provides support for ISDN devices and protocols. However, a vulnerability has been identified in the mISDN module that allows a sleeping function to be called from an invalid context.
Vulnerability Detail
The vulnerability in the mISDN module arises from the incorrect usage of a sleeping function in an invalid context. This can lead to various issues, including system instability, crashes, and potential privilege escalation attacks. An attacker may be able to exploit this vulnerability to execute arbitrary code or gain elevated privileges on the affected system. The vulnerability has been addressed in the Linux Kernel version v4.14.253 by commit 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the isdn package's mISDN module contains a vulnerability that allows a sleeping function to be called from an invalid context. This can lead to system instability, crashes, and potential privilege escalation attacks. It is crucial to update the Linux Kernel to version v4.14.253 or later to mitigate this vulnerability. For more information and assistance, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The isdn package is a component of the Linux Kernel ecosystem that handles Integrated Services Digital Network (ISDN) functionality. It provides support for transmitting voice, video, and data over digital telephone lines.
The mISDN module is a part of the isdn package and specifically deals with ISDN devices and protocols. It enables communication with ISDN hardware and facilitates the implementation of ISDN-related features.
The vulnerability allows a sleeping function to be called from an invalid context, which can result in system instability, crashes, and potential privilege escalation attacks. An attacker could exploit this vulnerability to execute arbitrary code or gain elevated privileges on the affected system.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.14.253 or later. This can be achieved by fetching the latest stable version of the Linux Kernel from the official repository and applying the commit 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367.
More information about this vulnerability can be found in the provided references link and the associated source code repository. Additionally, you can reach out to info@devnack.com for further support on vulnerability remediation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
