PT-2015-3274 · Linux · Linux Kernel
Publicado
2015-09-28
·
Atualizado
2015-09-28
CVSS v2.0
4.7
Média
| Vetor | AV:L/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is caused by a memory leak in the omap4 keypad probe handler implementation in the Linux kernel's iowarrior.ko module. An attacker, acting locally, can exploit this by connecting an OMAP4 Keypad device that lacks data on the number of rows or columns, creating an error situation in the omap4 keypad parse dt function. This error leads to memory not being freed in the keypad data allocation within the omap4 keypad probe function, located in omap4-keypad.c, when reading row and column counts from the device fails.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel