Vulnerability in Kernel - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
Summary
GSD-2021-1000487: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init. Affects Kernel versions >= 25c6ffb249f612c56a48ce48a3887adf57b8f4bd, < f4c4e07140687f42bfa40e091bb4a55d7960ce4d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It is responsible for managing system resources, handling input/output operations, and facilitating communication between software and hardware components. The qat module in the Kernel is used for offloading cryptographic operations to dedicated hardware accelerators. However, a vulnerability has been identified in the qat module related to the initialization of the ADF_STATUS_PF_RUNNING flag.
Vulnerability Detail
The vulnerability in the qat module occurs when the ADF_STATUS_PF_RUNNING flag is not properly set after adf_dev_init. This can lead to incorrect behavior and potential security issues. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v4.7 of the Linux Kernel and has been fixed in version v4.9.269 by commit f4c4e07140687f42bfa40e091bb4a55d7960ce4d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the qat module of the Kernel related to the improper setting of the ADF_STATUS_PF_RUNNING flag can potentially lead to security issues. It is recommended to update the Linux Kernel to version v4.9.269 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The qat module in the Kernel is responsible for offloading cryptographic operations to dedicated hardware accelerators, improving performance and efficiency.
The ADF_STATUS_PF_RUNNING flag is a status indicator used in the qat module to determine the operational state of the hardware accelerators.
The improper setting of the ADF_STATUS_PF_RUNNING flag can lead to incorrect behavior in the qat module, potentially resulting in security vulnerabilities such as data corruption or unauthorized access.
You can use tools like Vulert (https://vulert.com) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
You can refer to the commit f4c4e07140687f42bfa40e091bb4a55d7960ce4d in the Linux Kernel Git repository for more information about the fix for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
