Vulnerability in Kernel: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
Summary
GSD-2022-1002402: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one(). Affects Kernel versions >= 45804fbb00eea27bdf4d62751681228a9e2844e9, < 1e0c01319dedf1e63ec5df37ead048e17afd92ba. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities for various devices, including storage, networking, and input/output operations. The scsi subsystem within the Kernel handles SCSI (Small Computer System Interface) devices, enabling communication with storage devices such as hard drives and tape drives. One specific driver within the scsi subsystem is zorro7xx, which is responsible for managing SCSI devices connected via the Zorro bus on Amiga computers.
Vulnerability Detail
The vulnerability identified in the zorro7xx driver is a resource leak in the zorro7xx_remove_one() function. A resource leak occurs when system resources, such as memory or file descriptors, are not properly released after use. In this case, the zorro7xx_remove_one() function fails to release a resource, leading to a potential resource exhaustion issue. An attacker could exploit this vulnerability by repeatedly triggering the removal of zorro7xx devices, eventually depleting available system resources and causing a denial-of-service condition. The impact of this vulnerability may vary depending on the specific system configuration and the presence of other mitigating factors.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is advisable to apply the recommended fix by updating the Linux Kernel to the patched version.
Conclusion
In conclusion, the zorro7xx driver in the Kernel is vulnerable to a resource leak issue in the zorro7xx_remove_one() function. This vulnerability could be exploited to exhaust system resources and cause a denial-of-service condition. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v4.14.276 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software.
The scsi subsystem is a part of the Linux Kernel that handles SCSI (Small Computer System Interface) devices, enabling communication with storage devices such as hard drives and tape drives.
The zorro7xx driver is a specific driver within the scsi subsystem that manages SCSI devices connected via the Zorro bus on Amiga computers.
A resource leak occurs when system resources, such as memory or file descriptors, are not properly released after use.
The impact of this vulnerability may vary depending on the specific system configuration and the presence of other mitigating factors. It could potentially lead to a denial-of-service condition by depleting available system resources.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
