isdn: mISDN: Fix sleeping function called from invalid context
Summary
GSD-2021-1001801: isdn: mISDN: Fix sleeping function called from invalid context. Affects Kernel versions < a5b34409d3fc52114c828be4adbc30744fa3258b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling Integrated Services Digital Network (ISDN) functionality. ISDN is a set of communication standards for transmitting voice, video, and data over digital telephone lines. The mISDN module within the isdn package provides support for ISDN devices and protocols. However, a vulnerability has been identified in the mISDN module that allows a sleeping function to be called from an invalid context.
Vulnerability Detail
The vulnerability in the mISDN module arises from a sleeping function being invoked from an invalid context. This can lead to various issues, including system crashes, data corruption, and privilege escalation. An attacker may exploit this vulnerability to execute arbitrary code with elevated privileges or disrupt the normal operation of the system. The vulnerability has been addressed in the Linux Kernel version v4.19.214 through commit a5b34409d3fc52114c828be4adbc30744fa3258b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the mISDN module of the isdn package can lead to system crashes, data corruption, and potential privilege escalation. It is crucial to update the Linux Kernel to version v4.19.214 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in system crashes, data corruption, and potential privilege escalation. Attackers may exploit this vulnerability to execute arbitrary code with elevated privileges or disrupt the normal operation of the system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
No specific workarounds have been identified for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
You can find more information about the fix in the commit a5b34409d3fc52114c828be4adbc30744fa3258b of the Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/).
The vulnerability was discovered by an automated ID intended to aid in the discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
