Vulnerability in Kernel package: mmc: host: Return an error when ->enable_sdio_irq() ops is missing
Summary
GSD-2022-1001130: mmc: host: Return an error when ->enable_sdio_irq() ops is missing. Affects Kernel versions < e07547a45e507be37f6ab0e53c850f7720f6875f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for various hardware devices, including memory cards. The mmc (MultiMediaCard) subsystem within the Kernel handles communication with SD (Secure Digital) and MMC cards. The mmc host driver is responsible for managing the host controller and facilitating data transfer between the card and the system. However, a vulnerability has been discovered in the mmc host driver when the ->enable_sdio_irq() operation is missing.
Vulnerability Detail
The vulnerability arises when the mmc host driver does not implement the ->enable_sdio_irq() operation. This operation is responsible for enabling the SDIO (Secure Digital Input Output) interrupt request (IRQ) line. Without this operation, the SDIO IRQ line remains disabled, potentially leading to various issues. An attacker could exploit this vulnerability to disrupt normal SDIO card operations, resulting in data corruption, denial of service, or other unexpected behavior. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel's mmc host driver, specifically related to the absence of the ->enable_sdio_irq() operation, could potentially lead to data corruption, denial of service, or other unexpected behavior when interacting with SDIO cards. It is crucial to update the Kernel to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mmc host driver is a component of the Kernel responsible for managing the host controller and facilitating communication with SD and MMC cards.
The ->enable_sdio_irq() operation is responsible for enabling the SDIO interrupt request (IRQ) line, allowing the system to handle interrupts from SDIO cards.
The vulnerability could lead to data corruption, denial of service, or other unexpected behavior when interacting with SDIO cards.
There is no evidence of this vulnerability being exploited in the wild at the time of discovery.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
