PT-2015-3274

Publicado

2015-09-28

·

Atualizado

2015-09-28

Descrição por

CVSS 2.0
4.7
Média
MétricasAV:L/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is caused by a memory leak in the omap4 keypad probe handler implementation in the Linux kernel's iowarrior.ko module. An attacker, acting locally, can exploit this by connecting an OMAP4 Keypad device that lacks data on the number of rows or columns, creating an error situation in the omap4 keypad parse dt function. This error leads to memory not being freed in the keypad data allocation within the omap4 keypad probe function, located in omap4-keypad.c, when reading row and column counts from the device fails.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾