Double Free of io_acct_set Bioset in Linux Kernel
Summary
GSD-2022-1002985: md: fix double free of io_acct_set bioset. Affects Kernel versions >= 0c031fd37f69deb0cd8c43bbfcfccd62ebd7e952, < f99d5b5dc8a42c807b5f1176b925aa45d61962ab. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for numerous Linux distributions. It provides essential functionality for managing system resources and facilitating communication between hardware and software components. The io_acct_set bioset is a data structure used by the kernel's md (multiple devices) subsystem to track I/O accounting information for software RAID (Redundant Array of Independent Disks) devices. This vulnerability arises from a double free issue in the md subsystem's handling of the io_acct_set bioset.
Vulnerability Detail
The double free vulnerability in the md subsystem's handling of the io_acct_set bioset can be exploited by an attacker to potentially execute arbitrary code or cause a denial-of-service (DoS) condition. A double free occurs when a program attempts to free the same memory address twice, which can lead to memory corruption and unpredictable behavior. In this case, the vulnerability arises from improper handling of the io_acct_set bioset, which can result in the freeing of the same memory address multiple times. This can be triggered by a malicious user or a specially crafted input. Successful exploitation of this vulnerability could allow an attacker to gain elevated privileges or disrupt the normal operation of the affected system.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.14 or later. This fix is available in the commit f99d5b5dc8a42c807b5f1176b925aa45d61962ab, which was introduced in version v5.17 of the Linux Kernel. Users can obtain the updated kernel from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/. It is important to ensure that the updated kernel is properly installed and configured on the affected system.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The double free vulnerability in the md subsystem's handling of the io_acct_set bioset in the Linux Kernel can have serious security implications. It is crucial to update the Linux Kernel to version v5.17.14 or later to mitigate this vulnerability. Promptly applying security updates and following best practices for system hardening can help ensure the security and stability of the affected systems. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. It may also lead to memory corruption and unpredictable behavior.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any open-source vulnerabilities, including this one, are detected.
At the time of this report, there is no known public exploit for this vulnerability. However, it is always advisable to promptly apply security updates to mitigate the risk of potential exploits.
The risk of exploitation is generally higher in systems where untrusted users have access to the affected functionality or where the affected system is exposed to untrusted networks. It is recommended to follow security best practices, such as restricting access and implementing network segmentation, to reduce the risk of exploitation.
You can find more information about this vulnerability in the GSD-2022-1002985 entry of the GSD Database maintained by the Cloud Security Alliance. The entry can be accessed at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002985.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.