Vulnerability in dmaengine: mediatek package
Summary
UVI-2021-1001141: dmaengine: mediatek: free the proper desc in desc_free handler. Affects Kernel versions < 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA controllers. These controllers are responsible for managing direct memory access (DMA) operations in MediaTek SoCs. DMA allows data to be transferred between devices and memory without involving the CPU, improving overall system performance. However, a vulnerability has been discovered in the package that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in dmaengine: mediatek package involves improper handling of descriptors in the desc_free handler. This flaw could lead to memory leaks and potentially allow attackers to execute arbitrary code or cause a denial-of-service condition. The vulnerability has been assigned the ID UVI-2021-1001141 and has been fixed in Linux Kernel version v5.13 by commit 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in dmaengine: mediatek package can be mitigated by updating the Linux Kernel to version v5.13 or later. It is important to promptly apply the fix to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmaengine: mediatek package is a component of the Linux Kernel that provides support for MediaTek DMA controllers.
This vulnerability could potentially allow attackers to execute arbitrary code or cause a denial-of-service condition.
Yes, this vulnerability has been fixed in Linux Kernel version v5.13 by commit 0a2ff58f9f8f95526ecb0ccd7517fefceb96f661.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.13 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
