Memory Corruption in RX Ring in net: lantiq
Summary
GSD-2021-1000577: net: lantiq: fix memory corruption in RX ring. Affects Kernel versions >= fe1a56420cf2ec28c8eceef672b87de0bbe1a260, < 5ac72351655f8b033a2935646f53b7465c903418. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: lantiq package is a component of the Linux Kernel, which is responsible for managing network interfaces. It includes drivers for Lantiq network devices. The RX ring is a data structure used by the network driver to receive incoming packets. This vulnerability in the RX ring implementation can lead to memory corruption.
Vulnerability Detail
The vulnerability in net: lantiq's RX ring implementation can result in memory corruption. An attacker could exploit this vulnerability to manipulate network packets and potentially execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability was introduced in version v4.20 of the Linux Kernel and was fixed in version v5.10.42.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The net: lantiq package in the Linux Kernel is vulnerable to memory corruption in the RX ring implementation. This vulnerability can be mitigated by updating the Linux Kernel to version v5.10.42 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
net: lantiq is a component of the Linux Kernel that provides drivers for Lantiq network devices.
The RX ring is a data structure used by the network driver in net: lantiq to receive incoming packets.
Memory corruption refers to the unintended modification of data in a computer's memory. In this vulnerability, the RX ring implementation in net: lantiq can be manipulated, leading to memory corruption.
Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
To fix this vulnerability, update the Linux Kernel to version v5.10.42 or later, which includes the necessary fix for the memory corruption issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
