CVE-2023-31082: Vulnerability in linux-libc-dev - Sleeping function called from an invalid context in gsmld_write
Summary
CVE-2023-31082: An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. It is used to compile and build user-space applications that interact with the kernel. The package is essential for developing and running Linux-based software. However, a vulnerability has been discovered in the package that can lead to a kernel blockage. The vulnerability is present in the gsmld_write function in the drivers/tty/n_gsm.c file. It has been assigned the CVE identifier CVE-2023-31082.
Vulnerability Detail
The vulnerability arises from a sleeping function being called from an invalid context in the gsmld_write function. This can cause the kernel to become blocked, impacting the overall system performance. The issue has been disputed by some third parties as not being a valid vulnerability. However, it is still considered a potential security concern.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The linux-libc-dev package is vulnerable to a sleeping function called from an invalid context in gsmld_write. While there is some dispute regarding the validity of this vulnerability, it is still considered a potential security concern. It is recommended to update the package to a patched version as soon as it becomes available. For further assistance with vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. It is used for compiling and building user-space applications that interact with the kernel.
The vulnerability can cause the kernel to become blocked, leading to system performance issues.
Yes, it is recommended to update the linux-libc-dev package to a version that includes the necessary patches.
No specific workaround has been provided for this vulnerability.
Yes, this vulnerability has been reported and is being tracked by various security organizations.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
