Vulnerability in Kernel: mtd: rawnand: fsmc: Fix timing computation
Summary
GSD-2021-1002463: mtd: rawnand: fsmc: Fix timing computation. Affects Kernel versions >= d9fb0795718333e36f7e472d7d81b7b8efe347c8, < b78a27fa58cc7090ec4c4137e6afd0d477452844. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between the hardware and software layers. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The vulnerability in question affects the mtd: rawnand: fsmc module within the Kernel. This module is responsible for handling NAND flash memory devices connected via the Flexible Static Memory Controller (FSMC) interface. The vulnerability arises from an incorrect timing computation in the module, which can potentially lead to security issues and system instability.
Vulnerability Detail
The vulnerability in the mtd: rawnand: fsmc module of the Kernel arises from an error in the timing computation. This error can result in incorrect timing values being used during the operation of NAND flash memory devices connected via the FSMC interface. As a consequence, the timing requirements of these devices may not be met, leading to data corruption, read/write failures, or other unexpected behavior. Exploiting this vulnerability could potentially allow an attacker to manipulate the behavior of the affected NAND flash memory devices, leading to unauthorized access, data loss, or system compromise. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the mtd: rawnand: fsmc module of the Kernel, caused by an incorrect timing computation, can lead to data corruption, read/write failures, and system instability. It is crucial to update the Linux Kernel to version v5.4.165 or later to fix this vulnerability and prevent potential security issues. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the specific system configuration and usage. However, potential consequences include data corruption, read/write failures, and system instability. Exploiting this vulnerability could also lead to unauthorized access, data loss, or system compromise.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, and you can upload your manifest file (e.g., package-lock.json) to check for vulnerabilities without requiring access to the code or installation.
As of the publication date of this report, there are no known instances of this vulnerability being exploited. However, it is important to apply the recommended fix to mitigate any potential risks.
Yes, a patch for this vulnerability is available in the Linux Kernel version v5.4.165. It is recommended to update to this version or a later version to apply the fix.
The discovery of this vulnerability is attributed to the automated ID system used to aid in the discovery of potential security vulnerabilities. The actual impact and attack plausibility have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
