Refusal to Enable an Unbound Pipe in phonet/pep
Summary
GSD-2021-1002779: phonet/pep: refuse to enable an unbound pipe. Affects Kernel versions < b10c7d745615a092a50c2e03ce70446d2bec2aca. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The phonet/pep package is a component of the Linux Kernel, which is responsible for handling communication between devices using the Phonet protocol. The Phonet protocol is a network protocol used for communication between mobile devices and their peripherals. The phonet/pep package provides the necessary functionality to enable and manage Phonet pipes, which are used for data transfer between devices. However, a vulnerability has been discovered in the phonet/pep package that allows the enabling of an unbound pipe.
Vulnerability Detail
The vulnerability in the phonet/pep package allows an attacker to enable an unbound pipe. An unbound pipe is a pipe that has not been properly initialized or associated with any specific device or process. By enabling an unbound pipe, an attacker can potentially gain unauthorized access to sensitive data or execute arbitrary code on the affected system. This vulnerability poses a significant security risk as it can be exploited remotely without requiring any authentication. The vulnerability has been fixed in Linux Kernel version v4.9.295 by commit b10c7d745615a092a50c2e03ce70446d2bec2aca.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to ensure the security of the system.
Conclusion
The vulnerability in the phonet/pep package that allows the enabling of an unbound pipe poses a significant security risk. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The phonet/pep package is a component of the Linux Kernel that handles communication between devices using the Phonet protocol.
The Phonet protocol is a network protocol used for communication between mobile devices and their peripherals.
A Phonet pipe is used for data transfer between devices in the Phonet protocol.
An unbound pipe is a pipe that has not been properly initialized or associated with any specific device or process.
The vulnerability can be fixed by updating the Linux Kernel to version v4.9.295 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
