Linux Kernel (Raspberry Pi) Race Conditions and Null Pointer Dereference Vulnerabilities
- Investigating(current)
- Trending(upcoming)
- Workaround available(upcoming)
- Resolved(upcoming)
Executive summary
Canonical published USN-9029-1 detailing multiple vulnerabilities in the Linux kernel (Raspberry Pi), including race conditions in the AX.25 amateur radio protocol and a null pointer dereference in the i.MX clock driver. These vulnerabilities could allow a local attacker to cause a denial of service (system crash).
No verified workaround yet
None of the linked reports describe a mitigation. Follow this incident to hear when one appears.
Official fixRace conditions in the AX.25 amateur radio protocol implementation leading to use-after-free conditions, and unhandled memory allocation failure conditions in the i.MX clock driver leading to null pointer dereferences.
Evidence
1 report · 1 CVEShow
- [1]CVE First reportUSN-9029-1: Linux kernel (Raspberry Pi) vulnerabilities(opens security advisory in a new tab)
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205) It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a…
by Ubuntu Security 0upvotes 0comments
Timeline
- First report on security advisory
USN-9029-1: Linux kernel (Raspberry Pi) vulnerabilities
Source