Null Pointer Dereference in video: fbdev: smscufx
Summary
GSD-2022-1002365: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe(). Affects Kernel versions >= 3c8a63e22a0802fd56380f6ab305b419f18eb6f5, < dd3a6cc7385b89ec2303f39dfc3bafa4e24cec4b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The video: fbdev: smscufx package is a component of the Linux Kernel, which is responsible for handling video frame buffer devices. It provides support for various video display hardware, allowing applications to interact with the framebuffer and display graphics on the screen. The smscufx driver specifically handles the Universal Framebuffer X driver for SMSC UFX hardware. This vulnerability affects versions of the Linux Kernel starting from v3.2 and was fixed in v4.19.238.
Vulnerability Detail
The vulnerability identified in video: fbdev: smscufx is a null pointer dereference issue in the ufx_usb_probe() function. This function is responsible for probing and initializing the USB interface of the SMSC UFX hardware. Due to a coding error, a null pointer can be dereferenced when accessing a specific data structure, leading to a system crash or potential privilege escalation. An attacker with local access to the system may be able to exploit this vulnerability to crash the system or gain elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a possible workaround is to disable the video: fbdev: smscufx driver by blacklisting it. This can be achieved by adding the following line to the '/etc/modprobe.d/blacklist.conf' file:
blacklist smscufx
After adding this line, the system needs to be rebooted for the changes to take effect. However, it is important to note that this workaround may result in the loss of functionality provided by the video: fbdev: smscufx driver.
Conclusion
In conclusion, the video: fbdev: smscufx package in the Linux Kernel is vulnerable to a null pointer dereference issue in the ufx_usb_probe() function. This vulnerability can lead to system crashes or potential privilege escalation. It is recommended to update the Linux Kernel to version v4.19.238 or later to fix this vulnerability. Alternatively, the video: fbdev: smscufx driver can be disabled as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a system crash or potential privilege escalation. An attacker with local access to the system may be able to exploit this vulnerability to crash the system or gain elevated privileges.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it to identify any open-source vulnerabilities, including this one.
Yes, a patch for this vulnerability is available in the Linux Kernel version v4.19.238. It is recommended to update the kernel to this version or later to fix the vulnerability.
Yes, a possible workaround is to disable the video: fbdev: smscufx driver by blacklisting it. However, this may result in the loss of functionality provided by the driver.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2022-1002365 (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002365.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
