Vulnerability in sc16is7xx: Incorrect Data Transmission
Summary
GSD-2022-1000729: sc16is7xx: Fix for incorrect data being transmitted. Affects Kernel versions >= 6393ff1c4435acc343b1481f5b834b918cb42b12, < daedfa962a1c3762bc2cca7bb6ad209155276c6d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sc16is7xx is a driver in the Linux Kernel that provides support for the SC16IS7xx family of UART bridge devices. These devices allow communication between UART and I2C interfaces. The driver enables the use of these devices in Linux-based systems, facilitating serial communication. However, a vulnerability has been discovered in the sc16is7xx driver that results in incorrect data being transmitted.
Vulnerability Detail
The vulnerability in the sc16is7xx driver allows for incorrect data transmission. It was introduced in version v5.8 of the Linux Kernel by commit 6393ff1c4435acc343b1481f5b834b918cb42b12 and affects all subsequent versions until v5.16.12, where it was fixed by commit daedfa962a1c3762bc2cca7bb6ad209155276c6d. The impact and attack plausibility of this vulnerability have not been proven yet. However, if exploited, it could lead to data corruption or misinterpretation, potentially affecting the integrity and reliability of serial communication using the sc16is7xx devices.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The sc16is7xx driver in the Linux Kernel is vulnerable to incorrect data transmission, which can lead to data corruption or misinterpretation during serial communication. To address this vulnerability, it is crucial to update the Linux Kernel to version v5.16.12 or later. This update includes the necessary fix commit to rectify the issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The sc16is7xx driver is a component of the Linux Kernel that enables support for the SC16IS7xx family of UART bridge devices. These devices facilitate communication between UART and I2C interfaces in Linux-based systems.
If exploited, this vulnerability can result in incorrect data being transmitted through the sc16is7xx driver. This can lead to data corruption or misinterpretation, potentially affecting the integrity and reliability of serial communication using the sc16is7xx devices.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.12 or later. This update includes the fix commit daedfa962a1c3762bc2cca7bb6ad209155276c6d, which addresses the incorrect data transmission issue in the sc16is7xx driver.
The vulnerability was introduced in version v5.8 of the Linux Kernel and affects all subsequent versions until v5.16.12, where it was fixed.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
