Vulnerability in Kernel package: media: stk1160
Summary
GSD-2022-1002105: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED. Affects Kernel versions >= 8ac456495a33d9466076fea94594181ceefb76d9, < 4d68603cc4382174bc1e7d532e10675c48c6b257. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's resources and providing an interface between hardware and software. The media subsystem within the Kernel package includes drivers for various media devices. One such driver is stk1160, which supports video capture devices. This vulnerability specifically affects the stk1160 driver when starting a stream fails.
Vulnerability Detail
The vulnerability in the media: stk1160 driver occurs when the start stream operation fails. In this scenario, the driver does not properly handle the failure and returns buffers with the state VB2_BUF_STATE_QUEUED. This can lead to various issues, including potential memory corruption or resource leaks. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the media: stk1160 driver in the Kernel package is vulnerable to a potential memory corruption or resource leak issue when starting a stream fails. It is recommended to update to the latest version of the Linux Kernel package to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, it could potentially lead to memory corruption or resource leaks.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities.
As of now, there is no known exploit for this vulnerability. However, it is always recommended to apply security updates promptly to mitigate any potential risks.
No, only versions starting from v3.7 up to v5.10.109 are affected. The vulnerability has been fixed in version v5.10.110.
For more details about this vulnerability, you can refer to the source link provided in the vulnerability database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002105.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
