isdn: mISDN: Fix sleeping function called from invalid context
Summary
GSD-2021-1002052: isdn: mISDN: Fix sleeping function called from invalid context. Affects Kernel versions < 9f591cbdbed3d7822b2bdba89b34a6d7b434317d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling Integrated Services Digital Network (ISDN) protocols. ISDN is a set of communication standards used for transmitting voice, video, and data over digital telephone lines. The mISDN subsystem within the isdn package provides support for ISDN devices and their drivers. This vulnerability in the mISDN subsystem allows a sleeping function to be called from an invalid context, potentially leading to system instability or crashes.
Vulnerability Detail
The vulnerability in the mISDN subsystem arises from the incorrect usage of a sleeping function in an invalid context. When a sleeping function is called from an invalid context, it can disrupt the normal flow of execution and cause unexpected behavior. In the case of this vulnerability, it can lead to system instability or crashes. An attacker may be able to exploit this vulnerability to trigger a denial-of-service (DoS) condition or potentially execute arbitrary code with elevated privileges. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The isdn package in the Linux Kernel is vulnerable to a sleeping function being called from an invalid context in the mISDN subsystem. This vulnerability can potentially lead to system instability or crashes. It is recommended to update the Linux Kernel to version v5.10.76 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling Integrated Services Digital Network (ISDN) protocols.
The mISDN subsystem is a component of the isdn package that provides support for ISDN devices and their drivers.
The vulnerability can potentially lead to system instability or crashes. An attacker may be able to trigger a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.10.76 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
