CAM leaks in rtw89 ser during L2 reset
Summary
GSD-2022-1002842: rtw89: ser: fix CAM leaks occurring in L2 reset. Affects Kernel versions < f6aff772c9978844529618d86aafb53e5d3ae161. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rtw89 ser is a component of the Linux Kernel, which is responsible for managing the Realtek wireless network driver. It provides support for various Realtek Wi-Fi chipsets. The vulnerability in rtw89 ser occurs during L2 reset, leading to CAM leaks. CAM (Content Addressable Memory) is a hardware component used for storing MAC addresses and other network-related information. The vulnerability allows an attacker to cause memory leaks in the CAM, potentially leading to resource exhaustion and denial of service attacks.
Vulnerability Detail
The vulnerability in rtw89 ser occurs when performing an L2 reset. During this process, the driver fails to properly release the CAM entries, resulting in memory leaks. An attacker can exploit this vulnerability by repeatedly triggering L2 resets, causing the CAM memory to be exhausted. This can lead to a denial of service condition, where legitimate network traffic is unable to be processed due to lack of available CAM entries. The impact of this vulnerability can vary depending on the specific system configuration and the attacker's ability to trigger L2 resets.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The vulnerability in rtw89 ser that causes CAM leaks during L2 reset has been fixed in Linux Kernel version v5.18.3. Users are advised to update their Linux Kernel to the patched version to mitigate the risk of resource exhaustion and denial of service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
rtw89 ser is a component of the Linux Kernel that handles the Realtek wireless network driver. It provides support for various Realtek Wi-Fi chipsets.
CAM stands for Content Addressable Memory, which is a hardware component used for storing MAC addresses and other network-related information.
L2 reset refers to the process of resetting the second layer (data link layer) of the network stack. It is typically performed to recover from network-related issues or to reestablish network connectivity.
The impact of this vulnerability can vary depending on the specific system configuration and the attacker's ability to trigger L2 resets. It can lead to resource exhaustion and denial of service attacks by causing CAM memory leaks.
To fix this vulnerability, users should update their Linux Kernel to version v5.18.3 or later. This can be done by downloading the updated kernel source code from the official Linux Kernel repository and compiling it according to the provided instructions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
