Null Pointer Dereference in video: fbdev: smscufx
Summary
GSD-2022-1002446: video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe(). Affects Kernel versions >= 3c8a63e22a0802fd56380f6ab305b419f18eb6f5, < 0fd28daec73525382e5c992db8743bf76e42cd5c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The video: fbdev: smscufx package is a component of the Linux Kernel, which is responsible for managing the frame buffer devices for video output. It provides the necessary functionality for displaying graphics and video on various hardware platforms. The smscufx driver specifically handles USB video frame grabbers based on the SMSC UFX hardware. This vulnerability affects versions of the Linux Kernel from v3.2 to v4.14.275.
Vulnerability Detail
The vulnerability in video: fbdev: smscufx is a null pointer dereference issue that occurs in the ufx_usb_probe() function. This function is responsible for probing and initializing the USB video frame grabber devices. Due to a lack of proper validation, a null pointer can be dereferenced, leading to a kernel crash or potential privilege escalation. An attacker with physical access to the system or the ability to load a malicious USB device could exploit this vulnerability to crash the system or execute arbitrary code with kernel privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above as soon as possible.
Conclusion
The null pointer dereference vulnerability in video: fbdev: smscufx can lead to a kernel crash or potential privilege escalation. It is crucial to update the Linux Kernel to version v4.14.276 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a kernel crash or potential privilege escalation, allowing an attacker to execute arbitrary code with kernel privileges.
An attacker with physical access to the system or the ability to load a malicious USB device could exploit this vulnerability.
Versions from v3.2 to v4.14.275 are affected by this vulnerability.
Yes, the vulnerability is fixed in Linux Kernel version v4.14.276 by commit 0fd28daec73525382e5c992db8743bf76e42cd5c.
Yes, you can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability without any signup or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
