Resource Leak in iio: adc: men_z188_adc
Summary
GSD-2022-1000909: iio: adc: men_z188_adc: Fix a resource leak in an error handling path. Affects Kernel versions >= 74aeac4da66fbfa246edbfc849002eac9b5af9ca, < 53d43a9c8dd224e66559fe86af1e473802c7130e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The iio: adc: men_z188_adc is a driver in the Linux Kernel that provides support for the MEN Z188 ADC device. This device is used for analog-to-digital conversion in various applications. The driver allows users to interface with the device and perform ADC operations. However, a resource leak vulnerability has been discovered in the error handling path of the driver.
Vulnerability Detail
The vulnerability in the iio: adc: men_z188_adc driver is due to a resource leak that occurs when an error is encountered during the execution of the driver. This resource leak can lead to memory leaks and other resource exhaustion issues, potentially causing system instability or denial of service. The vulnerability was introduced in version v3.15 of the Linux Kernel and has been fixed in version v4.19.232 by commit 53d43a9c8dd224e66559fe86af1e473802c7130e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. However, users can mitigate the risk by ensuring they are running an updated version of the Linux Kernel that includes the fix for this vulnerability.
Conclusion
The resource leak vulnerability in the iio: adc: men_z188_adc driver can be fixed by updating the Linux Kernel to version v4.19.232 or later. Users should ensure they are running an updated version of the Kernel to mitigate the risk of this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The iio: adc: men_z188_adc driver is a component of the Linux Kernel that provides support for the MEN Z188 ADC device, allowing users to perform analog-to-digital conversion operations.
A resource leak vulnerability occurs when a program fails to properly release resources (such as memory or file handles) after they are no longer needed. This can lead to resource exhaustion and other issues.
The resource leak vulnerability in the iio: adc: men_z188_adc driver can result in memory leaks and other resource exhaustion issues. This can cause system instability or denial of service.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this one.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide guidance and assistance in resolving this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
