Vulnerability in comedi: ni_usb6501
Summary
UVI-2021-1002142: comedi: ni_usb6501: fix NULL-deref in command paths. Affects Kernel versions >= a03bb00e50ab4c07107da58a52a0bff7943f360c, < 4a9d43cb5d5f39fa39fc1da438517004cc95f7ea. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The comedi package is a collection of drivers for data acquisition devices. One of the drivers included in this package is ni_usb6501, which provides support for National Instruments USB-6501 devices. These devices are used for digital I/O operations and are commonly employed in various industrial and scientific applications. However, a vulnerability has been discovered in the ni_usb6501 driver that can lead to a NULL-dereference error in certain command paths.
Vulnerability Detail
The vulnerability in the ni_usb6501 driver arises from a NULL-dereference error in specific command paths. This error can be triggered under certain conditions, potentially leading to a system crash or other unexpected behavior. An attacker may be able to exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with kernel-level privileges. The impact and attack plausibility of this vulnerability have not been fully proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the ni_usb6501 driver of the comedi package can result in a NULL-dereference error, potentially leading to system crashes or unauthorized code execution. It is crucial to update the Linux Kernel to the recommended version to address this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Comedi is a collection of drivers for data acquisition devices, providing support for various hardware devices used in industrial and scientific applications.
ni_usb6501 is a driver included in the comedi package that supports National Instruments USB-6501 devices, which are used for digital I/O operations.
A NULL-dereference error occurs when a program attempts to access or manipulate memory using a null pointer, resulting in a crash or unexpected behavior.
This vulnerability can lead to a system crash, denial-of-service (DoS) condition, or the execution of arbitrary code with kernel-level privileges.
To mitigate the risk, it is recommended to update the Linux Kernel to version v5.14.18 or later, which includes a patch for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
