Fix Segfault in nfc_genl_dump_devices_done in Kernel
Summary
GSD-2021-1002646: nfc: fix segfault in nfc_genl_dump_devices_done. Affects Kernel versions < 2a8845b9603c545fddd17862282dc4c4ce0971e3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The nfc_genl_dump_devices_done function in the Kernel is responsible for handling NFC (Near Field Communication) devices. NFC technology allows for short-range wireless communication between devices, commonly used for contactless payments, data transfer, and other applications. However, a vulnerability has been discovered in the nfc_genl_dump_devices_done function that can lead to a segmentation fault, causing the system to crash or become unstable.
Vulnerability Detail
The vulnerability in nfc_genl_dump_devices_done function can be exploited by an attacker to trigger a segmentation fault, leading to a denial-of-service condition. By sending a specially crafted request to the affected system, an attacker can cause the function to access invalid memory, resulting in a crash. This vulnerability can be potentially exploited remotely, allowing an attacker to disrupt the normal operation of the system. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the patch or update the Kernel to the fixed version to mitigate the risk.
Conclusion
The nfc_genl_dump_devices_done function in the Kernel is vulnerable to a segmentation fault, which can lead to a denial-of-service condition. To mitigate this vulnerability, it is crucial to update the Kernel to version v4.19.222 or later, which includes the necessary fix. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial-of-service condition, causing the system to crash or become unstable.
Yes, this vulnerability can potentially be exploited remotely, allowing an attacker to disrupt the normal operation of the system.
No known exploit for this vulnerability has been reported at this time.
The vulnerability is present in versions prior to v4.19.222. Updating to the fixed version will address the issue.
No temporary solution is available. It is recommended to update the Kernel as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
