NFC: digital: Fix Possible Memory Leak in digital_in_send_sdd_req()
Summary
GSD-2021-1002035: NFC: digital: fix possible memory leak in digital_in_send_sdd_req(). Affects Kernel versions >= 2c66daecc4092e6049673c281b2e6f0d5e59a94c, < 50cb95487c265187289810addec5093d4fed8329. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC (Near Field Communication) subsystem in the Linux Kernel provides support for communication between devices over short distances. The digital driver within the NFC subsystem is responsible for handling digital communication protocols. One of the functions in this driver, digital_in_send_sdd_req(), is vulnerable to a possible memory leak.
Vulnerability Detail
The vulnerability in digital_in_send_sdd_req() function can lead to a memory leak. This means that memory allocated during the execution of the function may not be properly freed, resulting in a gradual depletion of available memory resources. If this vulnerability is exploited, it could potentially lead to system instability or denial of service conditions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in digital_in_send_sdd_req() function of the NFC digital driver can result in a memory leak, potentially leading to system instability or denial of service conditions. It is crucial to update the Linux Kernel to version v5.10.75 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
If this vulnerability is exploited, it could lead to memory leaks, potentially causing system instability or denial of service conditions.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if the vulnerability is present.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the fix to prevent any potential exploitation.
It is not recommended to manually patch the vulnerable code. Instead, it is advised to update the Linux Kernel to the latest version, as the fix has already been implemented.
This report specifically addresses the memory leak vulnerability in the digital_in_send_sdd_req() function. However, it is always recommended to keep the Linux Kernel up to date to address any potential security vulnerabilities in the NFC subsystem.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
