Memory Leak Vulnerability in iio: accel: kxcjk-1013
Summary
GSD-2021-1002609: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove. Affects Kernel versions >= a25691c1f9674090fb66586cf4c5d60d3efdf339, < 14508fe13b1c578b3d2ba574f1d48b351975860c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iio: accel: kxcjk-1013 is a driver in the Linux Kernel that provides support for the KXCJK-1013 accelerometer. This driver allows applications to access and utilize the accelerometer's data. The vulnerability in this driver can lead to a memory leak issue, which may result in the exhaustion of system resources and potential instability.
Vulnerability Detail
The memory leak vulnerability in the iio: accel: kxcjk-1013 driver occurs during the probe and remove processes. If not properly handled, these processes can result in the allocation of memory that is not freed, leading to a continuous consumption of resources. An attacker could potentially exploit this vulnerability to exhaust system memory, causing a denial-of-service condition or other adverse effects.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a temporary workaround can be implemented. The workaround involves disabling or removing the iio: accel: kxcjk-1013 driver from the system. This can be achieved by blacklisting the driver module or removing it from the kernel configuration. However, it is important to note that this workaround may result in the loss of accelerometer functionality.
Conclusion
The memory leak vulnerability in the iio: accel: kxcjk-1013 driver can have serious consequences, including resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.15.8 or later to fix this vulnerability. If immediate kernel update is not possible, a temporary workaround of disabling or removing the driver can be implemented. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, causing the exhaustion of system resources and potential instability. It may result in a denial-of-service condition or other adverse effects.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
Yes, the vulnerability is fixed in Linux Kernel version v5.15.8 or later. Updating the kernel to this version will resolve the memory leak issue in the iio: accel: kxcjk-1013 driver.
At the time of this report, no known exploits for this vulnerability have been identified. However, it is still important to apply the necessary fixes to mitigate any potential risks.
Yes, as a temporary workaround, you can disable or remove the iio: accel: kxcjk-1013 driver from your system. This can be achieved by blacklisting the driver module or removing it from the kernel configuration. Keep in mind that this workaround will result in the loss of accelerometer functionality.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
