Out-of-Bounds Read and Write in hw_atl_utils_fw_rpc_wait in atlantic
Summary
GSD-2021-1002550: atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait. Affects Kernel versions < cec49b6dfdb0b9fefd0f17c32014223f73ee2605. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The atlantic package is a component of the Linux Kernel, which is responsible for managing network interfaces. It provides support for the Atheros Atlantic network adapter. The hw_atl_utils_fw_rpc_wait function in atlantic is used to wait for a firmware RPC response. However, a vulnerability has been discovered in this function that allows for out-of-bounds read and write operations.
Vulnerability Detail
The vulnerability in hw_atl_utils_fw_rpc_wait arises from improper bounds checking, which can lead to accessing memory outside the intended range. An attacker could exploit this issue to read sensitive information or modify critical data structures, potentially leading to a denial of service or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the atlantic package in the Linux Kernel is vulnerable to an out-of-bounds read and write issue in the hw_atl_utils_fw_rpc_wait function. Users are advised to update their Linux Kernel to version v5.15.7 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The atlantic package is a component of the Linux Kernel that provides support for the Atheros Atlantic network adapter.
hw_atl_utils_fw_rpc_wait is a function in the atlantic package used to wait for a firmware RPC response.
An out-of-bounds read and write vulnerability occurs when a program accesses memory outside the intended range, potentially leading to information disclosure or data corruption.
This vulnerability could allow an attacker to read sensitive information or modify critical data structures, potentially leading to a denial of service or arbitrary code execution.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
