Increase wait time for VMbus unload in Linux Kernel
Summary
GSD-2021-1000456: Drivers: hv: vmbus: Increase wait time for VMbus unload. Affects Kernel versions >= 1dcf055a46ba41c971b0d4f7a19c584db4d01bac, < feb4750ef9b8cb26c8ae5933479cad9f16451f6a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux Kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices and software components. The HV (Hyper-V) vmbus driver is responsible for communication between the host and virtual machines running on Microsoft Hyper-V. The vmbus driver allows the guest operating system to interact with the host and access resources. However, a vulnerability has been discovered in the vmbus driver that could potentially be exploited by an attacker.
Vulnerability Detail
The vulnerability in the HV vmbus driver arises from a timing issue during the unloading of the VMbus. The wait time for unloading the VMbus is insufficient, which can lead to a use-after-free vulnerability. An attacker with local access to a guest operating system could exploit this vulnerability to execute arbitrary code or escalate privileges. The impact of this vulnerability can range from denial of service to full compromise of the host system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patch or update the Linux Kernel to the latest version.
Conclusion
The vulnerability in the HV vmbus driver of the Linux Kernel can lead to arbitrary code execution or privilege escalation. It is crucial for users to update their kernel installation to the latest stable version to ensure the vulnerability is patched. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from denial of service to full compromise of the host system. An attacker could execute arbitrary code or escalate privileges.
Any system running the affected versions of the Linux Kernel with the HV vmbus driver enabled is potentially vulnerable. Systems running virtual machines on Microsoft Hyper-V are particularly at risk.
No, this vulnerability requires local access to a guest operating system to be exploited.
There is no evidence to suggest that this vulnerability has been exploited in the wild at this time.
The only effective mitigation is to update the Linux Kernel to the latest version that includes the fix for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
