Fix error handling path in pt_core_init() in dmaengine: ptdma
Summary
GSD-2022-1000564: dmaengine: ptdma: Fix the error handling path in pt_core_init(). Affects Kernel versions >= fa5d823b16a9442d609617abeec31da8b6afa224, < d7de1e4820c5a42441ff7276174c8c0e63575c1b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: ptdma package is a component of the Linux Kernel. It provides support for DMA (Direct Memory Access) engines, which allow data to be transferred between devices and memory without involving the CPU. The pt_core_init() function is a critical part of the package that initializes the core functionality of the DMA engine. However, a vulnerability has been discovered in this function that could lead to potential security issues.
Vulnerability Detail
The vulnerability in pt_core_init() function in dmaengine: ptdma package allows for improper error handling. This could result in various security risks, such as memory corruption or privilege escalation attacks. An attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive information or execute arbitrary code on the affected system. The vulnerability was introduced in version v5.15 of the Linux Kernel and has been fixed in version v5.16.11.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix mentioned above as soon as possible.
Conclusion
The vulnerability in pt_core_init() function of dmaengine: ptdma package poses a potential security risk. It is crucial to update the Linux Kernel to version v5.16.11 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmaengine: ptdma package is a component of the Linux Kernel that provides support for DMA engines, enabling efficient data transfer between devices and memory.
The pt_core_init() function is a critical part of the dmaengine: ptdma package that initializes the core functionality of the DMA engine.
The vulnerability in pt_core_init() function could lead to memory corruption, privilege escalation, and unauthorized access to sensitive information.
To fix this vulnerability, update the Linux Kernel to version v5.16.11 or later by compiling the latest kernel source code or waiting for an updated package from your Linux distribution.
No, there is no specific workaround available. It is recommended to apply the fix mentioned above.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
