PT-2018-2814

Published

2018-12-03

·

Updated

2018-12-03

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux (affected versions not specified)
Description The issue is related to a memory deallocation error in the kalmia bind kernel handler implementation for Linux. When a Samsung Kalmia based LTE USB modem is connected, it can cause a denial of service due to an incorrect situation in the usb bulk msg function. Specifically, in the kalmia init and get ethernet addr function, memory is allocated in usb buf, but if an error code is returned from kalmia send init packet due to an error in usb bulk msg, the memory in usb buf is not released.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾