Fix a resource leak in an error handling path in iio: adc: men_z188_adc
Summary
GSD-2022-1000948: iio: adc: men_z188_adc: Fix a resource leak in an error handling path. Affects Kernel versions >= 74aeac4da66fbfa246edbfc849002eac9b5af9ca, < 0f88722313645a903f4d420ba61ddc690ec2481d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iio: adc: men_z188_adc is a driver in the Linux Kernel that provides support for the MEN Z188 ADC device. This device is used for analog-to-digital conversion in various applications. The driver allows users to interface with the device and perform ADC operations. However, a resource leak vulnerability has been identified in the error handling path of the driver.
Vulnerability Detail
The vulnerability in the iio: adc: men_z188_adc driver occurs when an error is encountered during the execution of certain operations. In this specific error handling path, a resource leak occurs, leading to a potential denial-of-service condition or memory exhaustion. An attacker could potentially exploit this vulnerability to exhaust system resources or cause a system crash. The vulnerability was introduced in Linux Kernel version v3.15 and has been fixed in version v4.9.304.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The iio: adc: men_z188_adc driver in the Linux Kernel is vulnerable to a resource leak issue in an error handling path. This vulnerability could result in a denial-of-service condition or memory exhaustion. It is recommended to update the Linux Kernel to version v4.9.304 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially lead to a denial-of-service condition or memory exhaustion. An attacker could exploit this vulnerability to exhaust system resources or cause a system crash.
You can use Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation. Simply upload your manifest file (e.g., package-lock.json) to the Vulert Playground and it will analyze and provide information on any vulnerabilities, including this one.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version (v4.9.304 or later) to address the issue.
The details of remote exploitation have not been provided in the vulnerability report. However, as the vulnerability can potentially lead to a denial-of-service condition, it is advisable to apply the fix to prevent any potential remote exploitation.
There are no known instances of this vulnerability being exploited in the wild. However, it is still important to apply the fix to mitigate any potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
