Vulnerability in Kernel: lkdtm/bugs
Summary
GSD-2022-1002995: lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP. Affects Kernel versions >= c75be56e35b2eef824a2ac8d90a98f9e65b28efa, < 8fc5104764c1f44b58ce7281de8fe923a11acc67. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It is responsible for managing system resources, executing processes, and facilitating communication between software and hardware. The lkdtm/bugs module within the Kernel is designed for testing and debugging purposes, providing a set of functions to trigger various kernel bugs and vulnerabilities. However, a vulnerability has been discovered in this module that can lead to unexpected thread termination.
Vulnerability Detail
The vulnerability in lkdtm/bugs arises when the thread termination is expected without the CONFIG_UBSAN_TRAP configuration. This misconfiguration can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or disrupt the normal operation of the system. The impact and attack plausibility of this vulnerability have not been proven yet, but it is essential to address it to ensure the stability and security of the system.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.15 or later. The fix for this vulnerability was implemented in commit 8fc5104764c1f44b58ce7281de8fe923a11acc67. Updating the Kernel will ensure that the misconfiguration is corrected, preventing potential exploitation of the vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to follow the recommended fix and update the Kernel to the latest version.
Conclusion
The vulnerability in the Kernel's lkdtm/bugs module can lead to unexpected thread termination, potentially causing a denial-of-service (DoS) condition or disrupting system operation. It is crucial to update the Kernel to the recommended version to fix this vulnerability and ensure the stability and security of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a denial-of-service (DoS) condition to disruption of normal system operation. However, the actual impact and attack plausibility have not been proven yet.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
At the time of this report, there is no known exploit for this vulnerability. However, it is crucial to address it by updating the Kernel to the recommended version.
The recommended fix for this vulnerability is to update the Kernel to the latest version. There is no specific workaround mentioned.
You can refer to the vulnerability details in the Open Source Vulnerability format provided by the Cloud Security Alliance's GSD database. The vulnerability ID is GSD-2022-1002995.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.