Vulnerability in ipheth package: EOVERFLOW in ipheth_rcvbulk_callback
Summary
GSD-2022-1000084: ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback. Affects Kernel versions >= 9f7e83674411bb1475e7ecd67df62c525fd7eec4, < 45b96488ec4cf10818c2457ada05fa8d660161cc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ipheth package is a component of the Linux Kernel, which is responsible for managing USB tethering functionality for Apple devices. It allows users to share their iPhone's internet connection with their computer via a USB cable. The ipheth_rcvbulk_callback function within the package is vulnerable to an EOVERFLOW issue.
Vulnerability Detail
The ipheth_rcvbulk_callback function in the ipheth package is susceptible to an EOVERFLOW vulnerability. This vulnerability can be exploited by an attacker to cause a buffer overflow, potentially leading to arbitrary code execution or a denial of service (DoS) attack. The issue was introduced in version v4.9.248 of the Linux Kernel and was fixed in version v4.9.300.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable USB tethering or disconnect any Apple devices from their computer until the Linux Kernel is updated to a version that includes the fix.
Conclusion
In conclusion, the ipheth package in the Linux Kernel is vulnerable to an EOVERFLOW issue in the ipheth_rcvbulk_callback function. It is crucial to update the Linux Kernel to version v4.9.300 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ipheth package is a component of the Linux Kernel that enables USB tethering functionality for Apple devices.
This vulnerability can potentially allow an attacker to execute arbitrary code or launch a denial of service attack.
To fix this vulnerability, update the Linux Kernel to version v4.9.300 or later.
Yes, users can disable USB tethering or disconnect Apple devices from their computer until the Linux Kernel is updated.
For more details, refer to the vulnerability report at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000084.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
