Fix resource leak in zorro7xx_remove_one() in Kernel
Summary
GSD-2022-1002312: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one(). Affects Kernel versions >= 45804fbb00eea27bdf4d62751681228a9e2844e9, < db863ab2baf058ed05c7b723612e3c40c9dd6885. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The zorro7xx module in the Kernel is responsible for handling SCSI devices connected via the Zorro bus. This vulnerability affects the zorro7xx_remove_one() function in the zorro7xx module.
Vulnerability Detail
The zorro7xx_remove_one() function in the zorro7xx module of the Kernel suffers from a resource leak. This vulnerability can be exploited by an attacker to exhaust system resources, leading to a denial-of-service condition. The resource leak occurs when the function fails to properly release resources during the removal of a zorro7xx device. This can result in a gradual depletion of system resources over time, potentially impacting system stability and performance.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is advised to apply the fix by updating the Kernel to the recommended version.
Conclusion
The zorro7xx_remove_one() function in the zorro7xx module of the Kernel suffers from a resource leak vulnerability. To mitigate this issue, it is advised to update the Kernel to version v4.19.238 or later. This will ensure that the resource leak is fixed and prevent potential system instability and performance degradation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a gradual depletion of system resources, potentially causing system instability and performance degradation.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities, including this one.
At the time of this report, there is no known exploit for this vulnerability. However, it is still important to apply the recommended fix to prevent potential resource depletion and system instability.
No, this vulnerability requires local access to the system in order to exploit it.
The only effective mitigation for this vulnerability is to update the Kernel to the recommended version that includes the fix for the resource leak in zorro7xx_remove_one().
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
