Vulnerability in pinctrl: samsung package - Drop Pin Banks References on Error Paths
Summary
GSD-2022-1002142: pinctrl: samsung: drop pin banks references on error paths. Affects Kernel versions >= ab663789d69760d2735402f66501f20b60312a3d, < be22ebe79e64c3a8eb76f68743d97771f244cb18. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The pinctrl: samsung package is a component of the Linux Kernel that provides support for pin control on Samsung SoCs. It allows configuring and managing the pins used for various functionalities on Samsung devices. This vulnerability affects the package's error handling mechanism, specifically related to pin banks references. Pin banks are logical groupings of pins, and the vulnerability occurs when these references are not properly dropped on error paths.
Vulnerability Detail
The vulnerability in the pinctrl: samsung package arises from the failure to release pin bank references in certain error scenarios. This can lead to resource leaks and potential memory corruption. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability was introduced in version v3.8 of the Linux Kernel and has been fixed in version v5.10.110.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the pinctrl: samsung package, which involves the improper release of pin bank references on error paths, has been addressed in the latest version of the Linux Kernel. It is recommended to update to version v5.10.110 or later to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially lead to resource leaks, memory corruption, denial-of-service (DoS) conditions, or arbitrary code execution with elevated privileges.
The vulnerability was introduced in version v3.8 of the Linux Kernel and affects all versions up to v5.10.109.
Yes, the vulnerability has been fixed in version v5.10.110 of the Linux Kernel.
There are no known exploits for this vulnerability at the moment.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
