Vulnerability in ipheth package: EOVERFLOW in ipheth_rcvbulk_callback
Summary
GSD-2022-1000162: ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback. Affects Kernel versions >= beead010654d0e0432166fccec290e10273b8c46, < f2a186a44e7e066d3418f80b2627f02677853b13. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ipheth package is a component of the Linux Kernel, which is responsible for providing support for tethering iPhones over USB. It allows users to share their iPhone's internet connection with their computer. The ipheth_rcvbulk_callback function in the package is vulnerable to an EOVERFLOW issue.
Vulnerability Detail
The ipheth_rcvbulk_callback function in the ipheth package is vulnerable to an EOVERFLOW issue. This vulnerability was introduced in version v5.4.82 of the Linux Kernel and fixed in version v5.4.177. An attacker could exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The ipheth package in the Linux Kernel is vulnerable to an EOVERFLOW issue in the ipheth_rcvbulk_callback function. It is recommended to update the Kernel to version v5.4.177 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ipheth package is a component of the Linux Kernel that provides support for tethering iPhones over USB. It allows users to share their iPhone's internet connection with their computer.
The impact of this vulnerability is not yet proven. However, it could potentially lead to a denial-of-service condition or allow an attacker to execute arbitrary code.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.177 or later. This will ensure that the ipheth package is patched and no longer vulnerable to the EOVERFLOW issue.
No specific workaround has been mentioned for this vulnerability.
For more information about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
