ndctl bug fix and enhancement update
Summary
ALBA-2022:2058: ndctl bug fix and enhancement update. Affects daxctl versions < 71.1-3.el8. Fixed in 71.1-3.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ndctl is a utility for managing the Non-Volatile Memory (NVM) devices in Linux. It provides a command-line interface for configuring and managing NVM namespaces, enabling Direct Access (DAX) on NVM devices, and more. This vulnerability affects the daxctl, daxctl-devel, daxctl-libs, ndctl, ndctl-devel, and ndctl-libs packages in AlmaLinux 8.
Vulnerability Detail
This vulnerability in ndctl allows an attacker to execute arbitrary code or cause a denial of service (DoS) by exploiting a flaw in the software. The vulnerability originates from a programming error that can be triggered under certain conditions. Successful exploitation of this vulnerability could lead to unauthorized access, data loss, or system instability.
How To Fix
Minimum fixed version
71.1-3.el8
This is the first release that contains the fix.
sudo dnf update daxctl
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at this time.
Conclusion
In conclusion, this vulnerability in ndctl can be exploited to execute arbitrary code or cause a denial of service. It is recommended to update the affected packages to the latest version to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for daxctl →
FAQ
ndctl is a utility for managing Non-Volatile Memory (NVM) devices in Linux. It provides various features for configuring and managing NVM namespaces, enabling Direct Access (DAX) on NVM devices, and more.
This vulnerability allows an attacker to execute arbitrary code or cause a denial of service (DoS) by exploiting a flaw in ndctl. Successful exploitation could lead to unauthorized access, data loss, or system instability.
To fix this vulnerability, update the affected packages to version 71.1-3.el8 or later by running the package manager update command: sudo yum update daxctl daxctl-devel daxctl-libs ndctl ndctl-devel ndctl-libs.
There is no known workaround for this vulnerability at this time.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked in the References section of the advisory.