isdn: cpai: check ctr->cnr to avoid array index out of bound
Summary
UVI-2021-1002182: isdn: cpai: check ctr->cnr to avoid array index out of bound. Affects Kernel versions < 1f3e2e97c003f80c4b087092b225c8787ff91e4d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The isdn package is a part of the Linux Kernel ecosystem and is responsible for handling ISDN (Integrated Services Digital Network) connections. ISDN is a set of communication standards for transmitting voice, video, and data over digital telephone lines. The cpai module within the isdn package is specifically designed to handle the Common ISDN Application Programming Interface (CAPI). This vulnerability affects the cpai module and can lead to an array index out of bounds error.
Vulnerability Detail
The vulnerability in the isdn cpai module arises from a lack of proper bounds checking on the 'ctr->cnr' variable. This variable is used as an index for accessing an array, but there is no validation to ensure that it remains within the bounds of the array. As a result, an attacker could potentially manipulate the 'ctr->cnr' value to access memory outside the allocated array, leading to a variety of potential security issues such as information disclosure or remote code execution. This vulnerability has been addressed in the Linux Kernel version v5.15 by commit 1f3e2e97c003f80c4b087092b225c8787ff91e4d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The isdn cpai module in the Linux Kernel is vulnerable to an array index out of bounds error. This vulnerability has been addressed in the Linux Kernel version v5.15 by commit 1f3e2e97c003f80c4b087092b225c8787ff91e4d. It is crucial to update the Linux Kernel to a version that includes this commit to mitigate the risk of potential security issues. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The isdn package is a component of the Linux Kernel ecosystem that handles ISDN connections.
The cpai module is a specific module within the isdn package that deals with the Common ISDN Application Programming Interface (CAPI).
An array index out of bounds error occurs when an index used to access an array is either negative or exceeds the size of the array. This can lead to memory corruption and potential security vulnerabilities.
This vulnerability could potentially allow an attacker to access memory outside the allocated array, leading to information disclosure or remote code execution.
To fix this vulnerability, update the Linux Kernel to version v5.15 or later, ensuring that the commit 1f3e2e97c003f80c4b087092b225c8787ff91e4d is included.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
