Use-after-free vulnerability in moxart package
Summary
GSD-2022-1000236: moxart: fix potential use-after-free on remove path. Affects Kernel versions < be93028d306dac9f5b59ebebd9ec7abcfc69c156. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The moxart package is a component of the Linux Kernel, which is responsible for managing the Moxa ART SoC devices. These devices are used in various industrial applications and provide features such as serial communication, GPIO, and interrupt handling. The moxart package is critical for the proper functioning of these devices and is widely used in industrial systems.
Vulnerability Detail
The identified vulnerability in the moxart package is a potential use-after-free issue on the remove path. This vulnerability could allow an attacker to exploit a freed memory region, leading to various security risks. The impact and attack plausibility of this vulnerability have not been proven yet, but it is crucial to address it to ensure the security of systems utilizing the moxart package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use-after-free vulnerability in the moxart package poses a potential security risk to systems utilizing Moxa ART SoC devices. It is recommended to update the Linux Kernel to version v5.10.100 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The moxart package is a component of the Linux Kernel that manages Moxa ART SoC devices used in industrial applications.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed, leading to potential security risks.
If exploited, this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition on systems utilizing the moxart package.
No, the impact and attack plausibility of this vulnerability have not been proven yet. However, it is still important to address it to ensure system security.
To fix this vulnerability, update the Linux Kernel to version v5.10.100 or later, which includes the necessary fix for the use-after-free issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
