Vulnerability in Kernel package: tipc: skb_linearize the head skb when reassembling msgs
Summary
GSD-2021-1000553: tipc: skb_linearize the head skb when reassembling msgs. Affects Kernel versions >= 45c8b7b175ceb2d542e0fe15247377bf3bce29ec, < ace300eecbccaa698e2b472843c74a5f33f7dce8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It is responsible for managing system resources, handling process scheduling, and facilitating communication between different software components. The tipc module within the Kernel package is used for communication between nodes in a cluster. It allows processes running on different nodes to exchange messages and establish connections.
The vulnerability in the tipc module involves the reassembly of messages. When receiving fragmented messages, the module fails to properly linearize the head socket buffer (skb) during reassembly. This can lead to memory corruption or other security issues if an attacker can send specially crafted fragmented messages to a vulnerable system.
Vulnerability Detail
The vulnerability arises from the failure to skb_linearize the head skb when reassembling messages in the tipc module. By exploiting this flaw, an attacker could potentially trigger memory corruption or execute arbitrary code on a vulnerable system. The impact and attack plausibility of this vulnerability have not been proven yet, but it is considered a potential security risk.
The vulnerability was introduced in version v4.3 of the Linux Kernel by commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec. It has been fixed in version v5.12.9 by commit ace300eecbccaa698e2b472843c74a5f33f7dce8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above by updating the Kernel package to the latest version.
Conclusion
The vulnerability in the Kernel package's tipc module can lead to memory corruption or arbitrary code execution if exploited. It is crucial to update the Kernel package to version v5.12.9 or later to mitigate this vulnerability. No known workarounds exist, and it is recommended to reboot the system after applying the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's capabilities and the system's configuration. It could potentially lead to memory corruption, privilege escalation, or arbitrary code execution.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the time of this report, there are no known exploits for this vulnerability. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely if the attacker can send specially crafted fragmented messages to a vulnerable system.
There is currently no evidence of active exploitation of this vulnerability. However, it is always recommended to apply security patches and updates to protect against potential threats.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
