Vulnerability in Kernel: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
Summary
GSD-2022-1002474: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one(). Affects Kernel versions >= 45804fbb00eea27bdf4d62751681228a9e2844e9, < ce430cfad6a5385d5b7f7c1dc3fa50f10abfd41b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The scsi subsystem within the Kernel handles communication with SCSI devices, enabling data transfer between the system and storage devices. The zorro7xx driver is specifically designed for SCSI controllers on Amiga Zorro II and Zorro III bus systems. This vulnerability affects the zorro7xx_remove_one() function in the zorro7xx driver, leading to a resource leak.
Vulnerability Detail
The vulnerability in the zorro7xx_remove_one() function of the zorro7xx driver allows for a resource leak. This can result in the depletion of system resources over time, potentially leading to system instability or denial of service. An attacker could potentially exploit this vulnerability to exhaust system resources, causing a system crash or rendering it unresponsive. The vulnerability was introduced in version v2.6.23 of the Linux Kernel and has been fixed in version v4.9.311.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The vulnerability in the zorro7xx_remove_one() function of the zorro7xx driver can lead to a resource leak, potentially causing system instability or denial of service. It is crucial to update the Linux Kernel to version v4.9.311 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a resource leak in the zorro7xx driver, potentially causing system instability or denial of service.
An attacker could exploit this vulnerability by continuously triggering the zorro7xx_remove_one() function, depleting system resources and causing a system crash.
The vulnerability was introduced in version v2.6.23 of the Linux Kernel. All versions between v2.6.23 and v4.9.310 are affected.
Yes, this vulnerability has been fixed in version v4.9.311 of the Linux Kernel.
There are no known exploits for this vulnerability at the time of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
