Vulnerability in Kernel Package: tcp: use alloc_large_system_hash() to allocate table_perturb
Summary
GSD-2022-1002583: tcp: use alloc_large_system_hash() to allocate table_perturb. Affects Kernel versions >= e9261476184be1abd486c9434164b2acbe0ed6c2, < 7883c2a056f3f3b80c0f12c3bb2820bbdee4b47b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The vulnerability in question affects the TCP (Transmission Control Protocol) module within the Kernel package.
Vulnerability Detail
The vulnerability arises from the improper allocation of the table_perturb variable in the TCP module. Instead of using the appropriate alloc_large_system_hash() function, an incorrect allocation method is employed. This vulnerability can potentially be exploited by attackers to manipulate the table_perturb value, leading to various security risks. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As there is no specific workaround mentioned for this vulnerability, it is crucial to apply the recommended fix by updating the Kernel package.
Conclusion
In conclusion, the Kernel package is susceptible to a vulnerability in the TCP module, which involves improper allocation of the table_perturb variable. While the impact and attack plausibility are yet to be proven, it is crucial to apply the recommended fix by updating the Kernel package to version v5.18.4 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software.
The TCP (Transmission Control Protocol) module is a key component of the Kernel package that handles reliable, ordered, and error-checked delivery of data between network devices.
The impact of this vulnerability is yet to be proven. However, if successfully exploited, it could lead to various security risks and potential system compromise.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.18.4 or later, which includes the necessary fix.
Users can obtain the updated Kernel package from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
