Vulnerability in Kernel package: tipc: check attribute length for bearer name
Summary
GSD-2022-1002627: tipc: check attribute length for bearer name. Affects Kernel versions >= cb30a63384bc91d5da06e1cede1115f666a29271, < 3af15272cde28fe5c8489174b8624e232c1775ec. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The tipc module within the Kernel package is responsible for handling communication between nodes in a cluster. It utilizes attributes to define various properties of the communication channels, including bearer names. Bearer names are used to identify the underlying network interface or protocol used for communication. However, a vulnerability has been discovered in the tipc module that allows for unchecked attribute length for bearer names, potentially leading to buffer overflows or other memory-related issues.
Vulnerability Detail
The vulnerability arises from a lack of proper validation of the length of bearer names in the tipc module. An attacker could exploit this by crafting a malicious message with a specially crafted bearer name, causing a buffer overflow or other memory corruption issues. This could potentially lead to arbitrary code execution, privilege escalation, or denial of service attacks. The vulnerability was introduced in version v4.17 of the Linux Kernel and has been fixed in version v5.18.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the tipc module if it is not required for their system's functionality. This can be done by modifying the Kernel configuration and excluding the tipc module from the build. However, this may impact the functionality of certain cluster communication features that rely on the tipc module.
Conclusion
In conclusion, a vulnerability has been identified in the Kernel package's tipc module, allowing for unchecked attribute length for bearer names. This could lead to memory corruption issues and potential security risks. It is recommended to update to version v5.18.4 or later of the Linux Kernel to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially allow an attacker to execute arbitrary code, escalate privileges, or cause denial of service attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any known vulnerabilities, including this one.
Yes, a patch has been released in version v5.18.4 of the Linux Kernel. It is recommended to update to this version or later to fix the vulnerability.
As a temporary workaround, you can disable the tipc module if it is not required for your system's functionality. However, this may impact certain cluster communication features.
You can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002627.json) for more information.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
