Global Out-of-Bounds Issue in pinctrl: mediatek
Summary
GSD-2021-1002812: pinctrl: mediatek: fix global-out-of-bounds issue. Affects Kernel versions < 441d3873664d170982922c5d2fc01fa89d9439ed. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The pinctrl: mediatek package is a component of the Linux Kernel. It provides support for configuring and controlling pin multiplexing and GPIO (General Purpose Input/Output) functionality on MediaTek SoCs (System-on-Chips). This package is responsible for managing the pin control subsystem, which allows software to control the hardware pins on a device. The pinctrl: mediatek package is widely used in various MediaTek-based devices, including smartphones, tablets, and IoT devices.
Vulnerability Detail
The identified vulnerability in the pinctrl: mediatek package is a global-out-of-bounds issue. This vulnerability allows an attacker to access memory outside the bounds of an allocated buffer, potentially leading to information disclosure, privilege escalation, or denial of service. The exact impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.10.89 by commit 441d3873664d170982922c5d2fc01fa89d9439ed.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.89 or later. This can be done by pulling the latest changes from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and applying the commit 441d3873664d170982922c5d2fc01fa89d9439ed. Alternatively, users can wait for their respective Linux distributions to release updated packages that include the fix.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the pinctrl: mediatek package in the Linux Kernel is vulnerable to a global-out-of-bounds issue. This vulnerability can be mitigated by updating the Linux Kernel to version v5.10.89 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
pinctrl: mediatek is a package in the Linux Kernel that provides support for configuring and controlling pin multiplexing and GPIO functionality on MediaTek SoCs.
A global-out-of-bounds issue refers to a vulnerability where an attacker can access memory outside the bounds of an allocated buffer, potentially leading to various security risks.
The possible impacts of this vulnerability include information disclosure, privilege escalation, and denial of service.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.10.89 by commit 441d3873664d170982922c5d2fc01fa89d9439ed.
To fix this vulnerability, you can update the Linux Kernel to version v5.10.89 or later by pulling the latest changes from the official Linux Kernel repository and applying the commit 441d3873664d170982922c5d2fc01fa89d9439ed.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.