Vulnerability in Kernel package: usb: musb: dsps
Summary
GSD-2021-1001796: usb: musb: dsps: Fix the probe error path. Affects Kernel versions >= 5269937d1483d3159d5b51907346e4f4b13ef079, < 5ed60a430fb5f3d93e7fef66264daef466b4d10c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is an essential component of the Linux operating system, responsible for managing the system's core functionality. It includes various subsystems, such as USB drivers. One of these drivers, musb: dsps, is susceptible to a vulnerability that affects the probe error path.
Vulnerability Detail
The vulnerability in the musb: dsps USB driver's probe error path can lead to potential security risks. Although the impact and attack plausibility have not been proven, it is crucial to address this issue promptly. The vulnerability was introduced in Linux Kernel version v4.14.247 by commit 5269937d1483d3159d5b51907346e4f4b13ef079 and fixed in version v4.14.252 by commit 5ed60a430fb5f3d93e7fef66264daef466b4d10c.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the musb: dsps USB driver's probe error path in the Kernel package can pose potential security risks. It is recommended to update the package to the fixed version to mitigate this vulnerability. For additional support and information, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The actual impact of this vulnerability is yet to be proven. However, it is crucial to address it to prevent potential security risks.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if the vulnerability is detected.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel package to the fixed version.
You can find more information about this vulnerability in the Open Source Vulnerability database. The specific vulnerability ID is GSD-2021-1001796.
For further support on vulnerability remediation, you can reach out to info@devnack.com. They will provide assistance and guidance in addressing the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
