Vulnerability in Kernel package: isdn: mISDN: Fix sleeping function called from invalid context
Summary
GSD-2021-1001961: isdn: mISDN: Fix sleeping function called from invalid context. Affects Kernel versions < 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for various hardware and software components. The isdn module within the Kernel package is responsible for handling Integrated Services Digital Network (ISDN) communication. It allows for the transmission of voice, video, and data over digital telephone lines. However, a vulnerability has been discovered in the isdn module that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the isdn module involves a sleeping function being called from an invalid context. This can lead to various issues, including system instability, crashes, and potential privilege escalation. Attackers may be able to exploit this vulnerability to execute arbitrary code or gain elevated privileges on the affected system. The vulnerability has been identified and fixed in Linux Kernel version v4.14.253 by commit 37e4f57b22cc5ebb3f80cf0f74fdeb487f082367.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel package.
Conclusion
The vulnerability in the isdn module of the Kernel package can lead to system instability, crashes, and potential privilege escalation. It is crucial to update the Linux Kernel package to version v4.14.253 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to system instability, crashes, and potential privilege escalation. Attackers may be able to execute arbitrary code or gain elevated privileges on the affected system.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this one.
Yes, a patch has been released in Linux Kernel version v4.14.253. It is recommended to update the Kernel package to this version or later to fix the vulnerability.
The exact exploitability of this vulnerability may vary depending on the system configuration and network environment. However, in general, remote exploitation is possible if the attacker can establish a connection to the affected system.
There are no known instances of this vulnerability being exploited in the wild at the time of this report. However, it is important to apply the necessary updates and patches to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
