Vulnerability in ARM: socfpga with CONFIG_FORTIRY_SOURCE
Summary
GSD-2021-1002470: ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE. Affects Kernel versions >= 9c4566a117a6fe404a0e49b27ac71b631945a70f, < 0effb7f51b65840bb129f52ddc765105c48c87ba. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ARM: socfpga package is a component of the Linux Kernel, which is responsible for managing the ARM architecture on SoCFPGA (System on Chip FPGA) devices. It provides support for various features and functionalities specific to these devices. However, a vulnerability has been discovered in the package when the CONFIG_FORTIRY_SOURCE configuration is enabled.
Vulnerability Detail
The vulnerability in ARM: socfpga with CONFIG_FORTIRY_SOURCE can lead to a crash in the system. Although the impact and attack plausibility have not been proven, it is essential to address this issue to ensure the stability and security of the system. The vulnerability was introduced in version v3.8 of the Linux Kernel and has been fixed in version v5.10.83 by commit 0effb7f51b65840bb129f52ddc765105c48c87ba.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.83 or later. This can be done by pulling the latest changes from the official Linux Kernel repository using the following command:
git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Then, navigate to the cloned repository and switch to the desired version using the following command:
git checkout v5.10.83
Finally, rebuild and reinstall the Linux Kernel to apply the fix.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the vulnerability in ARM: socfpga with CONFIG_FORTIRY_SOURCE can lead to system crashes. It is crucial to update the Linux Kernel to version v5.10.83 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ARM: socfpga is a package in the Linux Kernel that provides support for the ARM architecture on SoCFPGA devices.
CONFIG_FORTIRY_SOURCE is a configuration option in the Linux Kernel that, when enabled, can trigger the vulnerability in ARM: socfpga.
The vulnerability can result in a crash in the system, potentially leading to a denial-of-service condition or other unexpected behavior.
The vulnerability was introduced in version v3.8 of the Linux Kernel.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will provide real-time monitoring and alerts for open-source vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.