Memory Leak in NFC: st21nfca Package
Summary
GSD-2022-1000043: NFC: st21nfca: Fix memory leak in device probe and remove. Affects Kernel versions >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < e553265ea56482da5700f56319fda9ff53e7dcb4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The NFC: st21nfca package is a component of the Linux Kernel that provides support for the STMicroelectronics ST21NFCA NFC controller. NFC (Near Field Communication) is a technology that allows devices to communicate wirelessly over short distances. The st21nfca package enables NFC functionality on devices using this specific controller. However, a vulnerability has been discovered in the package that can lead to a memory leak.
Vulnerability Detail
The vulnerability in the NFC: st21nfca package is related to a memory leak issue during device probe and removal. When the package is used to probe and remove devices, it fails to release allocated memory properly, resulting in a memory leak. This can lead to memory exhaustion over time, potentially causing system instability or denial of service. The vulnerability was introduced in version v3.16 of the Linux Kernel and has been fixed in version v5.10.90.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leak vulnerability in the NFC: st21nfca package can be mitigated by updating the Linux Kernel to version v5.10.90 or later. This update includes the necessary fix commit to address the memory leak issue. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
NFC (Near Field Communication) is a technology that enables devices to communicate wirelessly over short distances, typically within a few centimeters. It is commonly used for contactless payment systems, access control, and data transfer between devices.
The st21nfca package is a component of the Linux Kernel that provides support for the STMicroelectronics ST21NFCA NFC controller. It enables NFC functionality on devices using this specific controller.
A memory leak is a software bug that occurs when allocated memory is not properly released after it is no longer needed. This can lead to a gradual loss of available memory, potentially causing system instability or performance issues.
The memory leak vulnerability in the NFC: st21nfca package can result in memory exhaustion over time. This can lead to system instability, performance degradation, or denial of service if the available memory is completely consumed.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json. The playground allows you to check vulnerabilities without any signup or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
