Memory Leak in NFC: st21nfca Package
Summary
GSD-2022-1000022: NFC: st21nfca: Fix memory leak in device probe and remove. Affects Kernel versions >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < a1e0080a35a16ce3808f7040fe0c3a8fdb052349. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC: st21nfca package is a component of the Linux Kernel, which is responsible for handling Near Field Communication (NFC) functionality. NFC enables communication between devices in close proximity, allowing for contactless data transfer and payment transactions. The st21nfca driver specifically supports STMicroelectronics' ST21NFC chipset. This vulnerability affects the device probe and remove functions of the st21nfca driver, leading to a memory leak.
Vulnerability Detail
The vulnerability in the NFC: st21nfca package involves a memory leak issue in the device probe and remove functions. When the driver is probed or removed, it fails to release allocated memory, resulting in a memory leak. This can lead to resource exhaustion and potential system instability. An attacker could potentially exploit this vulnerability to exhaust system resources, causing a denial-of-service (DoS) condition. The vulnerability was introduced in Linux Kernel version v3.16 and is fixed in version v4.19.224.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid using the affected st21nfca driver or disable NFC functionality if not required. However, this may limit the availability of NFC features on the system. It is recommended to apply the official fix by updating the Linux Kernel to the latest version.
Conclusion
The memory leak vulnerability in the NFC: st21nfca package can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v4.19.224 or later to address this issue. Users can also consider disabling NFC functionality or avoiding the use of the affected st21nfca driver as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a technology that enables short-range wireless communication between devices in close proximity. It allows for contactless data transfer and payment transactions.
The st21nfca package is a component of the Linux Kernel that provides support for STMicroelectronics' ST21NFC chipset. It enables NFC functionality on systems using this chipset.
A memory leak occurs when a program fails to release allocated memory after it is no longer needed. This can lead to a gradual loss of available memory, potentially causing resource exhaustion and system instability.
The memory leak vulnerability in the st21nfca driver can result in resource exhaustion and system instability. An attacker could exploit this vulnerability to cause a denial-of-service (DoS) condition, impacting the availability and performance of the affected system.
To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v4.19.224 or later, which includes the necessary fix. Additionally, users can consider disabling NFC functionality or avoiding the use of the st21nfca driver if not required.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
