isdn: cpai: Array Index Out of Bounds in ctr->cnr
Summary
GSD-2021-1001960: isdn: cpai: check ctr->cnr to avoid array index out of bound. Affects Kernel versions < 9b6b2db77bc3121fe435f1d4b56e34de443bec75. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a component of the Linux Kernel, which is responsible for handling Integrated Services Digital Network (ISDN) protocols. ISDN is a set of communication standards used for transmitting voice, video, and data over digital telephone lines. The isdn package provides the necessary drivers and utilities for ISDN functionality in the Linux operating system. This vulnerability affects the cpai module within the isdn package.
Vulnerability Detail
The vulnerability in the cpai module of the isdn package allows for an array index out of bounds access. Specifically, the code fails to check the ctr->cnr value, which can lead to accessing memory beyond the bounds of the array. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by updating the Linux Kernel to the specified version.
Conclusion
The isdn package in the Linux Kernel is vulnerable to an array index out of bounds access in the cpai module. This vulnerability can be mitigated by updating the kernel to version v4.14.253 or later. It is crucial to apply the recommended fix to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The isdn package is a component of the Linux Kernel that handles ISDN protocols for communication over digital telephone lines.
The cpai module is a specific module within the isdn package that is affected by this vulnerability.
An array index out of bounds access occurs when code attempts to access an element of an array beyond its defined boundaries.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
Yes, updating the Linux Kernel to version v4.14.253 or later fixes this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
