NFC: digital: Fix possible memory leak in digital_tg_listen_mdaa() in Kernel
Summary
GSD-2021-1001808: NFC: digital: fix possible memory leak in digital_tg_listen_mdaa(). Affects Kernel versions >= 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8, < 9881b0c860649f27ef2565deef011e516390f416. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures the stability and security of the system. NFC (Near Field Communication) is a technology that enables short-range wireless communication between devices. The digital_tg_listen_mdaa() function in the Kernel's NFC digital module is responsible for listening to NFC target devices. However, a vulnerability has been discovered in this function that could lead to a memory leak.
Vulnerability Detail
The vulnerability in digital_tg_listen_mdaa() function of the Kernel's NFC digital module can result in a memory leak. A memory leak occurs when a program fails to release memory that is no longer needed, leading to a gradual depletion of available memory resources. In this case, if the digital_tg_listen_mdaa() function encounters an error condition, it may fail to properly release allocated memory, resulting in a memory leak. This can potentially exhaust available memory and cause system instability or denial of service. The vulnerability was introduced in version v3.13 of the Linux Kernel and has been fixed in version v4.19.213.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in digital_tg_listen_mdaa() function of the Kernel's NFC digital module can result in a memory leak, potentially leading to system instability or denial of service. It is crucial to update the Linux Kernel to version v4.19.213 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing system instability or denial of service if memory resources are exhausted.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you in real-time if the vulnerability is present.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
The provided information does not indicate whether this vulnerability can be exploited remotely. However, memory leaks can potentially be leveraged by attackers to degrade system performance or facilitate other attacks.
There is no information available regarding known instances of this vulnerability being exploited.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
