Use After Free Vulnerability in net:emac/emac-mac
Summary
GSD-2021-1000229: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send. Affects Kernel versions >= b9b17debc69d27cd55e21ee51a5ba7fc50a426cf, < e407495ba6788a67d1bd41714158c079e340879b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net:emac/emac-mac package is a component of the Linux Kernel, which is responsible for managing the Ethernet Media Access Controller (EMAC) subsystem. The EMAC subsystem handles the communication between the network interface and the Ethernet hardware. It provides the necessary functions for transmitting and receiving network packets. This vulnerability affects the EMAC MAC transmission buffer (emac_mac_tx_buf_send) function, which is responsible for sending network packets. The vulnerability allows an attacker to exploit a use after free issue, potentially leading to arbitrary code execution or a denial of service.
Vulnerability Detail
The use after free vulnerability in the emac_mac_tx_buf_send function of net:emac/emac-mac allows an attacker to manipulate freed memory, leading to potential code execution or a denial of service. The vulnerability occurs when the function tries to access a buffer that has already been freed. By carefully crafting network packets, an attacker can trigger this vulnerability and execute arbitrary code or crash the system. This vulnerability was introduced in version v4.9 of the Linux Kernel and is fixed in version v5.12.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update the Linux Kernel to the fixed version.
Conclusion
The use after free vulnerability in the emac_mac_tx_buf_send function of net:emac/emac-mac poses a significant risk to systems running the affected Linux Kernel versions. It is crucial to update the Linux Kernel to version v5.12.4 or later to mitigate this vulnerability. Failure to address this issue may result in arbitrary code execution or denial of service attacks. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial of service by exploiting the use after free issue in the emac_mac_tx_buf_send function.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities.
At the time of this report, there is no known public exploit for this vulnerability. However, it is important to apply the patch or update the Linux Kernel to mitigate the risk.
Yes, this vulnerability can be exploited remotely. An attacker can craft malicious network packets to trigger the use after free issue in the emac_mac_tx_buf_send function.
The only effective mitigation for this vulnerability is to update the Linux Kernel to version v5.12.4 or later. It is crucial to apply the official patch or update to protect against potential attacks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
