Vulnerability in ARM: mmp package - Failure to Remove sram Device
Summary
GSD-2022-1002334: ARM: mmp: Fix failure to remove sram device. Affects Kernel versions < 609d47b36516f8dd894cf5997e755553b471baef. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ARM: mmp package is a component of the Linux Kernel, which is responsible for managing the Marvell Microprocessor Platform (MMP) architecture. This package provides support for various ARM-based systems, including handling memory management and device drivers. The vulnerability in question relates to the failure to remove a sram device, which can lead to potential security issues.
Vulnerability Detail
The vulnerability arises from a flaw in the ARM: mmp package, specifically in the handling of sram devices. Due to this flaw, the package fails to remove the sram device properly, which can result in security vulnerabilities. Although the exact impact and attack plausibility have not been proven, this vulnerability has the potential to be exploited by malicious actors to gain unauthorized access or execute arbitrary code on affected systems. It is crucial to address this vulnerability promptly to mitigate any potential risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the ARM: mmp package, which causes the failure to remove a sram device, can potentially lead to security risks. It is crucial to update the Linux Kernel to the fixed version to mitigate these risks. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it has the potential to allow unauthorized access or arbitrary code execution on affected systems.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002334.json
To update the Linux Kernel, you can follow the official documentation provided by your Linux distribution or refer to the kernel.org website for instructions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
