Missing Free in wm8350-power Charger IRQ
Summary
GSD-2022-1002498: power: supply: wm8350-power: Add missing free in free_charger_irq. Affects Kernel versions >= 14431aa0c5a443d13d24e6f865a8838f97dab973, < a6a3ec1626846fba62609330673a2dd5007d6a53. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The wm8350-power module is responsible for managing power supply on devices that use the WM8350 power management IC. It provides functionality for controlling various power-related features, including charger IRQ handling. The vulnerability in question is related to a missing free operation in the charger IRQ handling code.
Vulnerability Detail
The vulnerability occurs in the wm8350-power module's charger IRQ handling code. Specifically, there is a missing free operation in the free_charger_irq function. This omission can lead to a resource leak, potentially causing memory exhaustion and other related issues. An attacker may be able to exploit this vulnerability to exhaust system resources, leading to a denial of service (DoS) condition or other unexpected behavior.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by updating to the latest version of the Linux Kernel as mentioned in the 'how_to_fix' section.
Conclusion
The missing free operation in the wm8350-power module's charger IRQ handling code can lead to a resource leak and potential memory exhaustion. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v4.9.311 or later. Applying the necessary security patches and updates is crucial to ensure the stability and security of the system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a resource leak, potentially causing memory exhaustion and other related issues. This can result in a denial of service (DoS) condition or other unexpected behavior.
An attacker may be able to exploit this vulnerability to exhaust system resources, leading to a denial of service (DoS) condition or other unexpected behavior.
There is no known exploit for this vulnerability at the moment. However, it is always recommended to apply security patches and updates to mitigate potential risks.
The vulnerability was introduced in version v2.6.29 of the Linux Kernel. It is fixed in version v4.9.311 and later. Therefore, versions between v2.6.29 and v4.9.311 are affected.
For more details about this vulnerability, including the specific code changes and commits, you can refer to the source link provided in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
