Refcount Leak in altera_tse_mdio_create in Kernel
Summary
GSD-2022-1003257: net: altera: Fix refcount leak in altera_tse_mdio_create. Affects Kernel versions >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a, < e31d9ba169860687dba19bdc8fccbfd34077f655. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and manages system resources. It is responsible for facilitating communication between hardware and software components. The altera_tse_mdio_create function in the Kernel's net: altera module is used to create a management data input/output (MDIO) interface for Altera Triple-Speed Ethernet (TSE) devices. This interface allows for communication with external devices over the MDIO bus. However, a refcount leak vulnerability has been identified in the altera_tse_mdio_create function, which can lead to resource exhaustion and potential system instability.
Vulnerability Detail
The refcount leak vulnerability in altera_tse_mdio_create arises from a failure to properly handle reference counts when creating an MDIO interface. This can result in a refcount leak, where the reference count for the interface is not properly decremented, leading to resource leaks and potential memory corruption. An attacker could potentially exploit this vulnerability to exhaust system resources, causing a denial-of-service condition or even executing arbitrary code with elevated privileges. The vulnerability was introduced in version v3.15 of the Linux Kernel and has been fixed in version v5.15.47.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a possible workaround is to disable the use of the altera_tse_mdio_create function or the affected net: altera module altogether. This can be achieved by modifying the Kernel configuration to exclude the module from the build or by blacklisting the module at runtime. However, it is important to note that this workaround may impact the functionality of Altera Triple-Speed Ethernet devices and should only be considered as a temporary measure until the Kernel can be updated.
Conclusion
The refcount leak vulnerability in altera_tse_mdio_create poses a risk of resource leaks, memory corruption, and system instability. It is crucial to update the Linux Kernel to version v5.15.47 or later to mitigate this vulnerability. If immediate updating is not possible, consider applying the provided workaround while planning for the Kernel update. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource leaks, potential memory corruption, and system instability. An attacker could exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code with elevated privileges.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, a patch for this vulnerability has been included in version v5.15.47 of the Linux Kernel. It is recommended to update to this version or later to mitigate the risk.
Yes, a temporary workaround is to disable the use of the altera_tse_mdio_create function or the affected net: altera module. However, this may impact the functionality of Altera Triple-Speed Ethernet devices and should only be considered as a temporary measure until the Kernel can be updated.
You can find more information about this vulnerability in the GSD-2022-1003257 entry of the GSD Database maintained by the Cloud Security Alliance. The entry includes the vulnerability details, affected package, and references to the relevant commits in the Linux Kernel source code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
