Use-After-Free Vulnerability in Linux Kernel Firmware Loader
Summary
CVE-2022-49951: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix use-after-free during unregister In the following code within firmware_upload_unregister(), the call to device_unregister() could r... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including device drivers, file systems, and networking. The firmware loader is a critical subsystem that facilitates the loading of firmware into devices. This vulnerability affects the firmware loader, potentially compromising system stability and security.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability was identified in the firmware loader, specifically within the firmware_upload_unregister() function. The issue arises when device_unregister() is called, which can lead to the fw_upload_priv structure being freed before it is accessed for the module_put() call. This flaw, discovered by the kernel test robot using CONFIG_KASAN during firmware self-tests, can result in undefined behavior, crashes, or exploitation by malicious actors.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch by updating the kernel package.
Conclusion
The use-after-free vulnerability in the Linux kernel's firmware loader poses significant risks to system stability and security. Users are advised to update their kernel packages to the patched version 6.0.2-1 or later to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to crashes or exploitation.
You can use Vulert, a tool that monitors open-source vulnerabilities in your software. By simply uploading your manifest file, such as package-lock.json, you can receive real-time alerts about vulnerabilities.
Exploitation of this vulnerability could lead to system crashes, unauthorized access, or execution of arbitrary code, posing significant security risks.
While the primary risk is system instability and potential exploitation, there is a possibility of data loss if the system crashes or behaves unpredictably.
It is recommended to regularly check for updates and apply them promptly, especially when security vulnerabilities are disclosed.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
