Double Free Vulnerability in ocxl
Summary
GSD-2022-1002729: misc: ocxl: fix possible double free in ocxl_file_register_afu. Affects Kernel versions >= 75ca758adbafc81804c39b2c200ecdc819a6c042, < 9e9087cf34ee69f4e95d146ac29385d6e367a97b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
ocxl is a component in the Linux Kernel that provides support for Open Coherent Accelerator Processor Interfaces (OpenCAPI). It allows users to register Accelerator Function Units (AFUs) and communicate with them. The ocxl_file_register_afu function is responsible for registering an AFU file. However, a vulnerability has been discovered in this function that could lead to a double free issue.
Vulnerability Detail
The vulnerability in ocxl_file_register_afu arises from a possible double free scenario. When registering an AFU file, there is a chance that memory is freed twice, leading to undefined behavior. This vulnerability could potentially be exploited by an attacker to execute arbitrary code or cause a denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by updating the Linux Kernel to a patched version.
Conclusion
The double free vulnerability in ocxl_file_register_afu can be mitigated by updating the Linux Kernel to a patched version. It is crucial to apply this fix to ensure the security and stability of systems utilizing ocxl. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocxl is a component in the Linux Kernel that provides support for Open Coherent Accelerator Processor Interfaces (OpenCAPI). It allows users to register Accelerator Function Units (AFUs) and communicate with them.
ocxl_file_register_afu is a function in ocxl that is responsible for registering an AFU file. It is used to establish communication with an AFU.
A double free vulnerability occurs when a program attempts to free the same memory location twice. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial of service.
This vulnerability could potentially be exploited by an attacker to execute arbitrary code or cause a denial of service.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.18.3 or later. This update includes the necessary patch to address the double free issue in ocxl_file_register_afu.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
