Vulnerability in ARM: mmp package - Failure to Remove sram Device
Summary
GSD-2022-1001134: ARM: mmp: Fix failure to remove sram device. Affects Kernel versions < 8f3c2cf5d62000f606899a968df3d0479d4b1224. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ARM: mmp package is a component of the Linux Kernel, which is responsible for managing the Marvell Microprocessor Platform (MMP) architecture. This package provides support for various ARM-based systems, including system-on-chips (SoCs) manufactured by Marvell. The sram device is a critical component used for storing firmware and other essential data. However, a vulnerability has been discovered in the ARM: mmp package, which prevents the proper removal of the sram device.
Vulnerability Detail
The vulnerability in the ARM: mmp package results in the failure to remove the sram device. This issue can have several potential ramifications, including the persistence of sensitive data in the sram device even after it should have been cleared. Attackers with access to the affected system may be able to exploit this vulnerability to gain unauthorized access to sensitive information or execute arbitrary code. The vulnerability has been addressed in the Linux Kernel version v5.17.2 by commit 8f3c2cf5d62000f606899a968df3d0479d4b1224.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version as soon as possible.
Conclusion
The vulnerability in the ARM: mmp package, which causes the failure to remove the sram device, can have significant security implications. It is crucial to update the Linux Kernel to version v5.17.2 or later to mitigate this vulnerability. No known workarounds are available, and it is recommended to apply the fix as soon as possible. For further support, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to the persistence of sensitive data in the sram device, potentially allowing unauthorized access or execution of arbitrary code.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any vulnerabilities are found.
At the time of this report, no known exploits for this vulnerability have been disclosed. However, it is crucial to apply the fix promptly to mitigate any potential risks.
No, this vulnerability requires local access to the affected system to exploit. However, it is still important to address the issue to prevent potential unauthorized access or code execution.
For further support on vulnerability remediation or any other security concerns, you can reach out to info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
