Vulnerability in firmware: sysfb package - Platform-device Leak in Error Path
Summary
GSD-2022-1001320: firmware: sysfb: fix platform-device leak in error path. Affects Kernel versions >= 0589e8889dce8e0f0ea5bbf757f38865e2a469c1, < fed4df558b8cdb6f3beea38a7c977f118f082b0d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The firmware: sysfb package is a component of the Linux Kernel, which is responsible for managing the system frame buffer. It provides an interface for displaying graphics and text on the screen. The sysfb package is utilized by various applications and drivers to interact with the frame buffer and render visual content. However, a vulnerability has been identified in the package that can lead to a platform-device leak in the error path.
Vulnerability Detail
The vulnerability in the firmware: sysfb package occurs when an error is encountered during the execution of certain operations. In such cases, the error path is not properly handled, resulting in a platform-device leak. This leak can lead to resource exhaustion and potential denial-of-service attacks. An attacker could exploit this vulnerability to exhaust system resources, causing instability or crashes. The vulnerability was introduced in version v5.17 of the Linux Kernel and has been fixed in version v5.17.2.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is essential to update the Linux Kernel to the fixed version to mitigate the risk of exploitation.
Conclusion
The firmware: sysfb package in the Linux Kernel is vulnerable to a platform-device leak in the error path. This vulnerability can be exploited to exhaust system resources and potentially cause instability or crashes. To mitigate the risk, it is crucial to update the Linux Kernel to version v5.17.2 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The firmware: sysfb package is a component of the Linux Kernel that manages the system frame buffer, allowing applications and drivers to display graphics and text on the screen.
A platform-device leak refers to a situation where system resources allocated to a platform device are not properly released, leading to resource exhaustion and potential instability or crashes.
An attacker could exploit this vulnerability by triggering the error path in the sysfb package, causing a platform-device leak. This can lead to resource exhaustion and potential denial-of-service attacks.
The vulnerability was introduced in version v5.17 of the Linux Kernel. All versions between v5.17 and v5.17.2 are affected.
Yes, the vulnerability has been fixed in version v5.17.2 of the Linux Kernel. It is recommended to update to this version or later to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
