Fix trigger reference counting in iio: mma8452
Summary
GSD-2021-1002464: iio: mma8452: Fix trigger reference couting. Affects Kernel versions >= ae6d9ce05691bf79694074db7c7da980080548af, < acf0088ac073ca6e7f4cad6acac112177e08df5e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iio: mma8452 is a driver in the Linux Kernel that provides support for the MMA8452 accelerometer. This driver allows users to access and utilize the functionality of the MMA8452 accelerometer through the Industrial I/O (IIO) subsystem. The MMA8452 accelerometer is commonly used in various applications, including motion detection, orientation sensing, and gesture recognition. However, a vulnerability has been identified in the iio: mma8452 driver that could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the iio: mma8452 driver is related to trigger reference counting. The issue arises from a flaw in the implementation of trigger reference counting, which could result in incorrect reference counting and potential use-after-free vulnerabilities. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability was introduced in Linux Kernel version v4.2 and has been fixed in version v5.4.165 by commit acf0088ac073ca6e7f4cad6acac112177e08df5e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The iio: mma8452 driver in the Linux Kernel was found to have a vulnerability related to trigger reference counting. This vulnerability could potentially lead to security issues, including arbitrary code execution and denial-of-service. It is recommended to update the Linux Kernel to version v5.4.165 or later to fix this vulnerability. Users can also utilize Vulert Playground to check if their application is affected by this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The iio: mma8452 driver is a component of the Linux Kernel that provides support for the MMA8452 accelerometer. It allows users to interact with the MMA8452 accelerometer through the Industrial I/O (IIO) subsystem.
Trigger reference counting is a mechanism used in the iio: mma8452 driver to manage the usage of triggers. It ensures that triggers are properly initialized, used, and released to prevent resource leaks and potential vulnerabilities.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition by exploiting the use-after-free vulnerabilities resulting from incorrect trigger reference counting.
You can check if your application is affected by this vulnerability using Vulert Playground (https://vulert.com/scanner). Vulert Playground allows you to monitor and receive real-time alerts for open-source vulnerabilities without requiring access to the code or installation.
Yes, this vulnerability has been fixed in Linux Kernel version v5.4.165 by commit acf0088ac073ca6e7f4cad6acac112177e08df5e.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
