Refcount Leak in ill_acc_of_setup() in mips: ralink
Summary
GSD-2022-1001393: mips: ralink: fix a refcount leak in ill_acc_of_setup(). Affects Kernel versions < 8d7f7ef7980f287ace1c15f2ac03d6754e12f071. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mips: ralink package is a component of the Linux Kernel, which is responsible for supporting the MIPS architecture on Ralink devices. It provides essential functionality for these devices, including device drivers and system calls. The ill_acc_of_setup() function within this package is vulnerable to a refcount leak.
Vulnerability Detail
The ill_acc_of_setup() function in mips: ralink suffers from a refcount leak vulnerability. This vulnerability can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code. The vulnerability arises due to improper handling of reference counts, leading to a memory leak. An attacker could exploit this vulnerability by repeatedly triggering the ill_acc_of_setup() function, causing the reference count to increment and eventually exhaust system resources.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the mips: ralink package in the Linux Kernel is vulnerable to a refcount leak in the ill_acc_of_setup() function. This vulnerability can potentially lead to a denial-of-service (DoS) condition or arbitrary code execution. It is recommended to update to Linux Kernel version v5.16.20 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code.
An attacker can exploit this vulnerability by repeatedly triggering the ill_acc_of_setup() function, causing a memory leak and potentially exhausting system resources.
Yes, the vulnerability has been fixed in Linux Kernel version v5.16.20 by commit 8d7f7ef7980f287ace1c15f2ac03d6754e12f071.
The vulnerability affects versions of mips: ralink prior to Linux Kernel version v5.16.20.
More information about this vulnerability can be found in the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
