Null Pointer Dereference in com20020pci_probe() in net: arcnet: com20020
Summary
GSD-2022-1000898: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe(). Affects Kernel versions >= 8c14f9c70327a6fb75534c4c61d7ea9c82ccf78f, < b838add93e1dd98210482dc433768daaf752bdef. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The com20020 driver is a part of the Linux Kernel and is responsible for handling communication over the ARCnet protocol. ARCnet is a local area network protocol that was popular in the 1980s and 1990s. The com20020 driver provides support for the COM20020/COM20022 ARCnet controller chips. This vulnerability specifically affects the com20020pci_probe() function in the com20020 driver.
Vulnerability Detail
The vulnerability in com20020pci_probe() is a null pointer dereference issue. A null pointer dereference occurs when a program attempts to access or manipulate data using a null pointer, resulting in a crash or potentially exploitable behavior. In this case, the vulnerability is triggered when the com20020 driver attempts to access a null pointer during the probe process. An attacker could potentially exploit this vulnerability to crash the system or execute arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the latest version to mitigate the risk.
Conclusion
The null pointer dereference vulnerability in com20020pci_probe() in the com20020 driver can be mitigated by updating the Linux Kernel to version v4.19.233 or later. It is recommended to apply the necessary updates to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The com20020 driver is a part of the Linux Kernel and provides support for the COM20020/COM20022 ARCnet controller chips.
ARCnet is a local area network protocol that was popular in the 1980s and 1990s.
A null pointer dereference occurs when a program attempts to access or manipulate data using a null pointer, resulting in a crash or potentially exploitable behavior.
The impact of this vulnerability includes system crashes and potential execution of arbitrary code with kernel privileges.
To fix this vulnerability, update the Linux Kernel to version v4.19.233 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
