Vulnerability in comedi: ni_usb6501
Summary
GSD-2021-1001994: comedi: ni_usb6501: fix NULL-deref in command paths. Affects Kernel versions >= a03bb00e50ab4c07107da58a52a0bff7943f360c, < bc51111bf6e8e7b6cc94b133e4c291273a16acd1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The comedi package is a collection of drivers for data acquisition devices. One of the drivers included in this package is ni_usb6501, which provides support for National Instruments USB-6501 devices. These devices are used for digital I/O operations in various applications. The vulnerability identified in this driver can lead to a NULL-dereference issue in certain command paths.
Vulnerability Detail
The vulnerability in comedi: ni_usb6501 is caused by a NULL-dereference issue in specific command paths. This issue can be exploited by an attacker to cause a denial-of-service condition or potentially execute arbitrary code. The vulnerability was introduced in version v3.18 of the Linux Kernel and was fixed in version v4.19.217. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the comedi: ni_usb6501 vulnerability is a NULL-dereference issue in the ni_usb6501 driver of the comedi package. It can potentially lead to denial-of-service conditions or arbitrary code execution. Users should update their Linux Kernel to version v4.19.217 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Comedi is a package that provides drivers for data acquisition devices.
ni_usb6501 is a driver included in the comedi package that supports National Instruments USB-6501 devices for digital I/O operations.
A NULL-dereference issue occurs when a program attempts to access or manipulate a memory location that has a NULL (invalid) pointer value. This can lead to crashes or potentially allow an attacker to execute arbitrary code.
The potential consequences of this vulnerability include denial-of-service conditions and potential execution of arbitrary code by an attacker.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
