Memory Leak Vulnerability in NFC Digital Module of Linux Kernel
Summary
UVI-2021-1001829: NFC: digital: fix possible memory leak in digital_in_send_sdd_req(). Affects Kernel versions >= 2c66daecc4092e6049673c281b2e6f0d5e59a94c, < 2bde4aca56db9fe25405d39ddb062531493a65db. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The NFC (Near Field Communication) digital module is a component of the Linux Kernel that enables communication between devices in close proximity. It facilitates contactless data exchange and is commonly used for applications such as mobile payments and access control systems.
Vulnerability Detail
The NFC digital module in the Linux Kernel is susceptible to a memory leak vulnerability in the digital_in_send_sdd_req() function. This vulnerability can potentially lead to memory exhaustion and system instability. An attacker could exploit this vulnerability by sending specially crafted requests, causing the module to allocate memory resources that are not properly released. Over time, this could result in the depletion of available memory, impacting the overall performance and reliability of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply patches or backports provided by the Linux distribution maintainers. These patches may address the memory leak vulnerability without requiring a full kernel update. It is advisable to consult the official documentation or support channels of the specific Linux distribution for guidance on applying patches or backports.
Conclusion
The memory leak vulnerability in the NFC digital module of the Linux Kernel can have significant implications for system performance and stability. It is crucial to promptly update the kernel to the recommended version or apply patches/backports provided by the Linux distribution maintainers. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to memory exhaustion and system instability, potentially causing performance degradation and system crashes.
An attacker can exploit this vulnerability by sending specially crafted requests to the NFC digital module, triggering the allocation of memory resources that are not properly released.
At the time of this report, there is no known public exploit for this vulnerability. However, it is advisable to apply the recommended fixes to mitigate potential risks.
The vulnerability was introduced in version v3.13 of the Linux Kernel and persists until version v5.4.154. Updating to version v5.4.155 or later resolves the issue.
The primary solution is to update the Linux Kernel to the recommended version. However, users can also consider applying patches or backports provided by the Linux distribution maintainers as a temporary mitigation measure.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
