Null Pointer Dereference in svc_rqst_free() in Kernel
Summary
GSD-2021-1000217: SUNRPC: Fix null pointer dereference in svc_rqst_free(). Affects Kernel versions >= 5191955d6fc65e6d4efe8f4f10a6028298f57281, < c664aaec9aee544538a78ba4893a44bc73a6d742. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as a bridge between hardware and software. It manages system resources, facilitates communication between processes, and handles various hardware devices. The Kernel is responsible for maintaining the stability, security, and performance of the entire system. However, a vulnerability has been identified in the Kernel that can lead to a null pointer dereference in the svc_rqst_free() function.
Vulnerability Detail
The null pointer dereference vulnerability in svc_rqst_free() occurs when a null pointer is accessed, leading to a system crash or potential privilege escalation. An attacker can exploit this vulnerability by sending a specially crafted request to the affected system, causing the Kernel to dereference a null pointer. This can result in a denial of service (DoS) condition or allow the attacker to execute arbitrary code with elevated privileges. The vulnerability was introduced in version v5.11 of the Linux Kernel and has been fixed in version v5.12.5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply patches or backports provided by their Linux distribution to address the null pointer dereference vulnerability in svc_rqst_free(). These patches may vary depending on the distribution and Kernel version. It is recommended to consult the official documentation or support channels of the specific Linux distribution for guidance on applying the necessary patches.
Conclusion
The null pointer dereference vulnerability in svc_rqst_free() in the Kernel can have severe consequences, including system crashes and potential privilege escalation. It is crucial to update the Linux Kernel to version v5.12.5 or later to mitigate this vulnerability. Applying patches or backports provided by the Linux distribution can also help protect the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A null pointer dereference vulnerability occurs when a program attempts to access or dereference a null pointer, leading to unexpected behavior or crashes.
The null pointer dereference vulnerability in svc_rqst_free() can result in a system crash (DoS) or allow an attacker to execute arbitrary code with elevated privileges.
An attacker can exploit this vulnerability by sending a specially crafted request to the affected system, triggering a null pointer dereference in the Kernel.
Yes, this vulnerability has been fixed in version v5.12.5 of the Linux Kernel.
To protect your system, it is recommended to update the Linux Kernel to version v5.12.5 or later. Additionally, applying patches or backports provided by your Linux distribution can serve as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
