Vulnerability in hwmon (nct6775) Package: Fix crash in clear_caseopen
Summary
GSD-2022-1000631: hwmon: (nct6775) Fix crash in clear_caseopen. Affects Kernel versions >= 2e7b9886968b89f0b4cbc59b8e6ed47fd4edd0dd, < cfb7d12f2e4a4d694f49e9b4ebb352f7b67cdfbb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The hwmon package is a hardware monitoring subsystem in the Linux Kernel. It provides access to various sensors and monitors on the system, allowing users to monitor temperature, voltage, and fan speed. The nct6775 driver is specifically responsible for monitoring the NCT6775F hardware chip. This chip is commonly found on motherboards and provides monitoring capabilities for various hardware components. However, a vulnerability has been discovered in the clear_caseopen function of the nct6775 driver, which can lead to a crash in certain scenarios.
Vulnerability Detail
The vulnerability in the nct6775 driver's clear_caseopen function can be triggered under specific conditions, causing a crash. The exact cause of the crash is not specified in the vulnerability report. However, it is important to note that crashes can potentially lead to denial-of-service (DoS) situations, impacting the availability of the system. The impact and attack plausibility of this vulnerability have not been proven yet. It is recommended to update to Linux Kernel version v5.16.5 or later, which includes the fix for this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The hwmon (nct6775) package in the Linux Kernel is vulnerable to a crash in the clear_caseopen function. This vulnerability can potentially lead to denial-of-service situations. It is recommended to update the Linux Kernel to version v5.16.5 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The hwmon package is a hardware monitoring subsystem in the Linux Kernel that provides access to various sensors and monitors on the system.
The nct6775 driver is responsible for monitoring the NCT6775F hardware chip, which is commonly found on motherboards and provides monitoring capabilities for various hardware components.
The clear_caseopen function is a specific function within the nct6775 driver that is responsible for handling certain cases related to hardware monitoring.
The impact of this vulnerability is not yet proven. However, crashes can potentially lead to denial-of-service (DoS) situations, impacting the availability of the system.
To fix this vulnerability, update the Linux Kernel to version v5.16.5 or later, which includes the fix for this issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
