PT-2015-3274 · Linux · Linux Kernel
Published
2015-09-28
·
Updated
2015-09-28
CVSS v2.0
4.7
Medium
| Vector | AV:L/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is caused by a memory leak in the omap4 keypad probe handler implementation in the Linux kernel's iowarrior.ko module. An attacker, acting locally, can exploit this by connecting an OMAP4 Keypad device that lacks data on the number of rows or columns, creating an error situation in the omap4 keypad parse dt function. This error leads to memory not being freed in the keypad data allocation within the omap4 keypad probe function, located in omap4-keypad.c, when reading row and column counts from the device fails.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel