Null Pointer Dereference in rtc: pl031
Summary
GSD-2022-1001915: rtc: pl031: fix rtc features null pointer dereference. Affects Kernel versions >= d9b0dd54a1943f47a381a474f8ea2c94466110c0, < cd2722e411e8ab7e5ae41102f6925fa13dffdac5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rtc: pl031 is a driver in the Linux Kernel that provides support for the ARM PrimeCell Real Time Clock (RTC) module. This module is responsible for keeping track of time and providing time-related functionalities to the system. The vulnerability in this driver allows for a null pointer dereference, which can lead to a system crash or potential privilege escalation.
Vulnerability Detail
The null pointer dereference vulnerability in rtc: pl031 occurs when a null pointer is accessed in the code. This can happen when certain features of the RTC module are accessed without proper validation of the pointer. An attacker can exploit this vulnerability by sending specially crafted input to the affected system, causing it to crash or potentially execute arbitrary code with elevated privileges. The impact of this vulnerability depends on the context in which the driver is used and the privileges of the attacker.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the rtc: pl031 driver if it is not essential for their system. This can be done by removing the module or disabling the corresponding configuration option in the kernel configuration. However, this may impact the functionality of certain time-related features in the system.
Conclusion
The null pointer dereference vulnerability in rtc: pl031 can lead to system crashes and potential privilege escalation. It is important to update the Linux Kernel to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
rtc: pl031 is a driver in the Linux Kernel that provides support for the ARM PrimeCell Real Time Clock (RTC) module. It is responsible for keeping track of time and providing time-related functionalities to the system.
The null pointer dereference vulnerability occurs when certain features of the rtc: pl031 driver are accessed without proper validation of the pointer, leading to a null pointer dereference.
The potential consequences of this vulnerability include system crashes and potential privilege escalation. An attacker can exploit this vulnerability to crash the system or execute arbitrary code with elevated privileges.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.33 or later. Users can download the latest stable version from the official Linux Kernel repository and follow the installation instructions provided.
Yes, users can disable the rtc: pl031 driver if it is not essential for their system. This can be done by removing the module or disabling the corresponding configuration option in the kernel configuration. However, this may impact the functionality of certain time-related features in the system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
