PT-2018-2814
Published
2018-12-03
·
Updated
2018-12-03
Description by
CVSS 2.0
4.9
MediumMetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux (affected versions not specified)
Description
The issue is related to a memory deallocation error in the kalmia bind kernel handler implementation for Linux. When a Samsung Kalmia based LTE USB modem is connected, it can cause a denial of service due to an incorrect situation in the
usb bulk msg function. Specifically, in the kalmia init and get ethernet addr function, memory is allocated in usb buf, but if an error code is returned from kalmia send init packet due to an error in usb bulk msg, the memory in usb buf is not released.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾