Global Out-of-Bounds Issue in pinctrl: mediatek
Summary
GSD-2021-1002846: pinctrl: mediatek: fix global-out-of-bounds issue. Affects Kernel versions < fb563baa3eb8e7a15f2cff3c2695e2cca0493e69. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The pinctrl: mediatek package is a component of the Linux Kernel that provides support for controlling pin multiplexing and configuration for MediaTek SoCs. It allows for the management of pin functions and their associated settings, such as input/output mode, pull-up/pull-down resistors, and drive strength. This package is crucial for proper hardware initialization and configuration on MediaTek-based devices.
Vulnerability Detail
The identified vulnerability in pinctrl: mediatek is a global-out-of-bounds issue. This vulnerability arises from a programming error that allows an attacker to access memory outside the bounds of an allocated buffer. By exploiting this vulnerability, an attacker could potentially overwrite critical data or execute arbitrary code, leading to a variety of security risks, including privilege escalation, information disclosure, or system crashes. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The global-out-of-bounds issue in pinctrl: mediatek poses a potential security risk. It is recommended to update the Linux Kernel to the fixed version or apply the relevant commit to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
pinctrl: mediatek is a component of the Linux Kernel that provides support for controlling pin multiplexing and configuration for MediaTek SoCs.
A global-out-of-bounds issue is a vulnerability that occurs when a program accesses memory outside the bounds of an allocated buffer.
The potential risks include privilege escalation, information disclosure, and system crashes.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to at least version v5.15.12 or any subsequent release that includes the fix commit fb563baa3eb8e7a15f2cff3c2695e2cca0493e69.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
