Memory Leak in uss720_probe in Kernel
Summary
UVI-2021-1000609: misc/uss720: fix memory leak in uss720_probe. Affects Kernel versions >= 0f36163d3abefbda1b21a330b3fdf3c2dc076d94, < 5394ae9d8c7961dd93807fdf1b12a1dde96b0a55. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionality for the proper functioning of the system. The uss720_probe function is part of the miscellaneous (misc) subsystem in the Kernel. This function is responsible for handling the initialization of the USS720 USB device. However, a memory leak vulnerability has been identified in the uss720_probe function.
Vulnerability Detail
The memory leak vulnerability in uss720_probe allows an attacker to cause a continuous allocation of memory without proper deallocation, leading to memory exhaustion. This can result in system instability, performance degradation, and potentially denial-of-service (DoS) conditions. The vulnerability was introduced in version v2.6.14 of the Linux Kernel and has been fixed in version v5.10.42. The vulnerability can be triggered by an attacker with physical access to the system or by exploiting a vulnerable USB device.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Kernel to the patched version to mitigate the risk of exploitation.
Conclusion
The memory leak vulnerability in uss720_probe can have severe consequences on system stability and performance. It is crucial to update the Linux Kernel to version v5.10.42 or later to mitigate the risk of exploitation. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to memory exhaustion, system instability, performance degradation, and potential denial-of-service (DoS) conditions.
An attacker can exploit this vulnerability by triggering the uss720_probe function with a specially crafted USB device or by having physical access to the system.
Yes, the vulnerability has been fixed in version v5.10.42 of the Linux Kernel.
Yes, the vulnerability was introduced in version v2.6.14 of the Linux Kernel and affects all versions up to v5.10.41.
There is no known public exploit for this vulnerability at the time of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
