Vulnerability in Kernel: usb: musb: tusb6010
Summary
UVI-2021-1002273: usb: musb: tusb6010: check return value after calling platform_get_resource(). Affects Kernel versions < 3ee15f1af17407be381bcf06a78fa60b471242dd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. The usb-musb-tusb6010 driver is specifically designed for the Texas Instruments TUSB6010 USB controller. It enables the functionality of this USB controller, allowing devices to connect and interact with the system. However, a vulnerability has been discovered in this driver that could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the usb-musb-tusb6010 driver arises from a failure to check the return value after calling the platform_get_resource() function. This oversight could result in various security risks, although the exact impact and likelihood of exploitation have not been confirmed. The vulnerability has been assigned the ID UVI-2021-1002273. It has been fixed in the Linux Kernel version v5.4.162 through commit 3ee15f1af17407be381bcf06a78fa60b471242dd.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Kernel as described above.
Conclusion
The vulnerability in the usb-musb-tusb6010 driver of the Kernel could potentially lead to security issues. It is crucial to update the Kernel to version v5.4.162 or later to mitigate this vulnerability. Alternatively, users can manually apply the fix by adding the commit 3ee15f1af17407be381bcf06a78fa60b471242dd to their Kernel source code and rebuilding the Kernel. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a core component of the Linux operating system that manages system resources and facilitates communication between hardware and software.
The usb-musb-tusb6010 driver is a specific driver for the Texas Instruments TUSB6010 USB controller. It enables the functionality of this USB controller in the Linux system.
The exact impact of this vulnerability is not yet confirmed. However, it could potentially lead to security issues if exploited.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.162 or later. Alternatively, users can manually apply the fix by adding the commit 3ee15f1af17407be381bcf06a78fa60b471242dd to their Kernel source code and rebuilding the Kernel.
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
