Vulnerability in comedi: dt9812 package - Fix for DMA buffers on stack
Summary
GSD-2021-1001928: comedi: dt9812: fix DMA buffers on stack. Affects Kernel versions >= 63274cd7d38a3322d90b66a5bc976de1fb899051, < a6af69768d5cb4b2528946d53be5fa19ade37723. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The comedi: dt9812 package is a component of the Linux Kernel ecosystem. It provides support for the DT9812 data acquisition device. This device is commonly used in industrial and scientific applications for data collection and analysis. The package includes drivers and libraries that enable communication with the DT9812 device and facilitate data transfer. However, a vulnerability has been discovered in the package related to the handling of DMA (Direct Memory Access) buffers on the stack.
Vulnerability Detail
The vulnerability in the comedi: dt9812 package arises from the use of DMA buffers on the stack. DMA is a technique used to transfer data between devices and memory without involving the CPU. In this case, the package incorrectly allocates DMA buffers on the stack, which can lead to stack overflow vulnerabilities. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability was introduced in version v2.6.29 of the Linux Kernel and has been fixed in version v4.4.292.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The comedi: dt9812 package in the Linux Kernel ecosystem is vulnerable to a stack overflow issue related to DMA buffers. This vulnerability can be mitigated by updating the Linux Kernel to version v4.4.292 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The comedi: dt9812 package is a component of the Linux Kernel ecosystem that provides support for the DT9812 data acquisition device.
DMA stands for Direct Memory Access. It is a technique used to transfer data between devices and memory without involving the CPU.
The vulnerability in the comedi: dt9812 package could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.4.292 or later.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
