Vulnerability in Kernel package: platform/x86: dell-smbios-wmi
Summary
GSD-2021-1000517: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios. Affects Kernel versions >= 1a258e670434f404a4500b65ba1afea2c2b29bba, < 75cfc833da4a2111106d4c134e93e0c7f41e35e7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system, responsible for managing the system's core functionality. It provides essential services and interfaces for hardware, software, and user applications. The platform/x86: dell-smbios-wmi module is a part of the Kernel package and specifically handles the Dell System Management BIOS (SMBIOS) functionality on x86 platforms. It allows users to access and manage system information, such as hardware configuration and status, through the Windows Management Instrumentation (WMI) interface. However, a vulnerability has been discovered in this module that can lead to a system crash or instability when unloading the dell_smbios module using the rmmod command.
Vulnerability Detail
The vulnerability in the platform/x86: dell-smbios-wmi module arises from an oops (kernel panic) that occurs when attempting to remove the dell_smbios module using the rmmod command. This issue can be triggered by an attacker or a user with local access to the system. If successfully exploited, it can result in a denial of service (DoS) condition, causing the system to crash or become unstable. The vulnerability was introduced in Linux Kernel version v4.15 by commit 1a258e670434f404a4500b65ba1afea2c2b29bba and is fixed in version v4.19.192 by commit 75cfc833da4a2111106d4c134e93e0c7f41e35e7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Kernel package.
Conclusion
The vulnerability in the platform/x86: dell-smbios-wmi module of the Kernel package can lead to a system crash or instability when unloading the dell_smbios module. To mitigate this vulnerability, it is crucial to update the Kernel package to version v4.19.192 or later. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
If successfully exploited, this vulnerability can lead to a system crash or instability, resulting in a denial of service (DoS) condition.
An attacker or a user with local access to the system can exploit this vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, the vulnerability is fixed in Linux Kernel version v4.19.192 by commit 75cfc833da4a2111106d4c134e93e0c7f41e35e7.
No, there is no known workaround for this vulnerability. It is necessary to update the Kernel package to apply the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
