Refcount Leak in dpaa2-ptp
Summary
GSD-2022-1001980: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe. Affects Kernel versions >= d346c9e86d8685d7cdceddf5b2e9c4376334620c, < ebd1e3458dbf6643aa0272da398cb5b537d492b7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dpaa2-ptp package is a component of the Linux Kernel that provides support for Precision Time Protocol (PTP) in the Data Path Acceleration Architecture 2 (DPAA2) framework. PTP is a protocol used for clock synchronization in networked systems. The dpaa2-ptp module enables PTP functionality on DPAA2-enabled devices.
Vulnerability Detail
The vulnerability identified as GSD-2022-1001980 in dpaa2-ptp is a refcount leak issue. This vulnerability occurs in the dpaa2_ptp_probe function. The refcount leak can lead to a resource leak, potentially causing memory exhaustion and system instability. An attacker may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by applying the recommended fix and updating their Linux Kernel to the latest version.
Conclusion
The refcount leak vulnerability in dpaa2-ptp can lead to memory exhaustion, system instability, and potential exploitation by attackers. It is crucial to update the Linux Kernel to version v5.10.111 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dpaa2-ptp is a component of the Linux Kernel that enables Precision Time Protocol (PTP) support on devices using the Data Path Acceleration Architecture 2 (DPAA2) framework.
A refcount leak refers to a situation where the reference count of a resource is not properly decremented when it is no longer needed. This can lead to a resource leak, potentially causing memory exhaustion and system instability.
The vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges. It may also result in memory exhaustion and system instability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.111 or later. This will ensure that the refcount leak is properly handled and prevent any potential exploitation.
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by applying the recommended fix and updating their Linux Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
