PT-2018-2814 · Linux · Linux
Published
2018-12-03
·
Updated
2018-12-03
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux (affected versions not specified)
Description
The issue is related to a memory deallocation error in the kalmia bind kernel handler implementation for Linux. When a Samsung Kalmia based LTE USB modem is connected, it can cause a denial of service due to an incorrect situation in the
usb bulk msg function. Specifically, in the kalmia init and get ethernet addr function, memory is allocated in usb buf, but if an error code is returned from kalmia send init packet due to an error in usb bulk msg, the memory in usb buf is not released.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux