Vulnerability in Kernel package: sfc: farch: fix TX queue lookup in TX flush done handling
Summary
GSD-2021-1000139: sfc: farch: fix TX queue lookup in TX flush done handling. Affects Kernel versions >= 12804793b17c0e19115a90d98f2f3df0cb79e233, < fb791572d6747ef385f628450f8d57cd132e6e5a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for various hardware devices, system resources, and software components. The sfc (Solarflare Communications) driver within the Kernel package is responsible for managing network interfaces using Solarflare network adapters. This vulnerability specifically affects the farch (Falcon Architecture) implementation within the sfc driver.
Vulnerability Detail
The vulnerability in the sfc driver's farch implementation arises from an incorrect TX queue lookup in the TX flush done handling. This flaw can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability was introduced in version v5.10 of the Linux Kernel by commit 12804793b17c0e19115a90d98f2f3df0cb79e233 and has been fixed in version v5.10.36 by commit fb791572d6747ef385f628450f8d57cd132e6e5a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel package is not immediately feasible, a possible workaround is to disable the affected network interface or remove the Solarflare network adapter from the system. This can help mitigate the risk of exploitation until the Kernel package can be updated.
Conclusion
The vulnerability in the Kernel package's sfc driver's farch implementation can lead to a denial-of-service (DoS) condition or arbitrary code execution. It is crucial to update the Kernel package to version v5.10.36 or later to mitigate this vulnerability. If immediate update is not possible, disabling the affected network interface or removing the Solarflare network adapter can provide temporary protection. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code with elevated privileges.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities, including this one.
At the time of this report, there are no known public exploits for this vulnerability. However, it is important to promptly update the Kernel package to mitigate the risk of potential exploitation.
As a temporary measure, you can disable the affected network interface or remove the Solarflare network adapter from the system. This can help reduce the attack surface and mitigate the risk until the Kernel package is updated.
You can refer to the official Linux Kernel repository on Git for detailed information about the fix commit (fb791572d6747ef385f628450f8d57cd132e6e5a) and the vulnerability introduction commit (12804793b17c0e19115a90d98f2f3df0cb79e233). Additionally, the vulnerability details are available in the GSD database maintained by the Cloud Security Alliance (CSA).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
