Vulnerability in comedi: ni_usb6501
Summary
UVI-2021-1001971: comedi: ni_usb6501: fix NULL-deref in command paths. Affects Kernel versions >= a03bb00e50ab4c07107da58a52a0bff7943f360c, < df7b1238f3b599a0b9284249772cdfd1ea83a632. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The comedi package is a collection of drivers for data acquisition devices. One of the drivers included in this package is ni_usb6501, which provides support for National Instruments USB-6501 devices. These devices are used for digital I/O operations and are commonly employed in various industrial and scientific applications. However, a vulnerability has been discovered in the ni_usb6501 driver that could potentially lead to a NULL-dereference issue in certain command paths.
Vulnerability Detail
The vulnerability in the ni_usb6501 driver arises from a NULL-dereference bug in specific command paths. This bug can be triggered when executing certain commands, causing the driver to dereference a NULL pointer. An attacker with access to the affected system could potentially exploit this vulnerability to crash the system or execute arbitrary code with kernel privileges. The impact and attack plausibility of this vulnerability have not been fully proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the comedi ni_usb6501 driver can lead to a NULL-dereference issue in certain command paths. It is crucial to update the Linux Kernel to a patched version to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Comedi is a collection of drivers for data acquisition devices used in various industrial and scientific applications.
ni_usb6501 is a driver included in the comedi package that provides support for National Instruments USB-6501 devices, which are used for digital I/O operations.
A NULL-dereference bug occurs when a program attempts to access or dereference a memory location that has a NULL (invalid) pointer value. This can lead to crashes or other unexpected behavior.
If exploited, this vulnerability could result in system crashes or allow an attacker to execute arbitrary code with kernel privileges.
To fix this vulnerability, update your Linux Kernel to version v4.14.255 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
