Null Return Check Vulnerability in soc: qcom: rpmpd
Summary
GSD-2022-1001887: soc: qcom: rpmpd: Check for null return of devm_kcalloc. Affects Kernel versions >= bbe3a66c3f5a65fb3d702351bac2a6033944d389, < 724376c30af5a57686b223dbcd6188e07d2a1de2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The soc: qcom: rpmpd is a component in the Linux Kernel that handles power management for Qualcomm SoCs. It provides support for the RPM (Resource Power Manager) subsystem, which controls the power states of various hardware components. The vulnerability in question arises from a missing null return check in the devm_kcalloc function, which is used for allocating memory. This vulnerability can potentially be exploited by an attacker to cause a denial-of-service condition or execute arbitrary code.
Vulnerability Detail
The vulnerability occurs when the devm_kcalloc function is called without checking the return value for null. This can lead to a situation where the allocated memory is not properly initialized or used, resulting in undefined behavior. An attacker could potentially exploit this vulnerability by crafting a malicious input that triggers the uninitialized memory, leading to a crash or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The null return check vulnerability in soc: qcom: rpmpd can potentially lead to a denial-of-service condition or arbitrary code execution. It is recommended to update to Linux Kernel version v5.15.33 or a later version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
soc: qcom: rpmpd is a component in the Linux Kernel that handles power management for Qualcomm SoCs. It provides support for the RPM subsystem, which controls the power states of various hardware components.
devm_kcalloc is a function in the Linux Kernel that is used for allocating memory with managed resources. It is typically used in device drivers to allocate memory for data structures.
The impact of this vulnerability can range from a denial-of-service condition to arbitrary code execution. However, the actual impact and attack plausibility have not been proven yet.
To fix this vulnerability, it is recommended to update to Linux Kernel version v5.15.33 or a later version. Users can obtain the updated kernel from the official Linux Kernel repository.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
