Double Free Vulnerability in ocxl
Summary
GSD-2022-1003075: misc: ocxl: fix possible double free in ocxl_file_register_afu. Affects Kernel versions >= 75ca758adbafc81804c39b2c200ecdc819a6c042, < 252768d32e92c1214aeebb5fec0844ca479bcf5c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ocxl package is a component of the Linux Kernel that provides support for Open Coherent Accelerator Processor Interface (OpenCAPI) devices. OpenCAPI is an open standard that allows accelerators, such as Field-Programmable Gate Arrays (FPGAs), to be connected to a host processor. The ocxl package enables communication between the host processor and the accelerators. It is an essential component for systems that utilize OpenCAPI technology.
Vulnerability Detail
The identified vulnerability in ocxl is a possible double free issue in the ocxl_file_register_afu function. A double free vulnerability occurs when a program attempts to free the same memory block twice, which can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition. The vulnerability was introduced in version v5.2 of the Linux Kernel and has been fixed in version v5.17.14.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the ocxl functionality or remove the ocxl module from the Kernel. However, this may impact the functionality of systems that rely on OpenCAPI devices. It is strongly advised to apply the official fix by updating the Linux Kernel to the latest version.
Conclusion
The double free vulnerability in ocxl can be mitigated by updating the Linux Kernel to version v5.17.14 or later. It is important to promptly apply the fix to ensure the security and stability of systems utilizing OpenCAPI devices. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocxl is a component of the Linux Kernel that enables communication between the host processor and OpenCAPI devices, such as FPGAs.
OpenCAPI is an open standard that allows accelerators, like FPGAs, to be connected to a host processor.
A double free vulnerability occurs when a program attempts to free the same memory block twice, leading to memory corruption and potential security issues.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition on systems utilizing OpenCAPI devices.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later by following the provided installation instructions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
