net/smc: Remove device from smcd_dev_list after failed device_add()
Summary
GSD-2021-1000580: net/smc: remove device from smcd_dev_list after failed device_add(). Affects Kernel versions >= c6ba7c9ba43de1b57e9a53946e7ff988554c84ed, < 8b2cdc004d21a7255f219706dca64411108f7897. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net/smc package is a part of the Linux Kernel ecosystem. It provides support for the SMC (System Management Controller) protocol, which allows for efficient communication between systems. The smcd_dev_list is a list of SMC devices managed by the kernel. This vulnerability arises when a device is not removed from the smcd_dev_list after a failed device_add() operation.
Vulnerability Detail
The vulnerability occurs due to the failure to remove a device from the smcd_dev_list after a device_add() operation fails. This can lead to inconsistencies in the list, potentially causing subsequent operations to fail or result in unexpected behavior. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The net/smc package in the Linux Kernel is vulnerable to a flaw that allows devices to remain in the smcd_dev_list after a failed device_add() operation. This vulnerability has been fixed in Linux Kernel version v5.10.42. Users are advised to update their Linux Kernel to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net/smc package is a part of the Linux Kernel ecosystem and provides support for the SMC (System Management Controller) protocol.
The smcd_dev_list is a list of SMC devices managed by the kernel.
The impact of this vulnerability is not yet proven, but it could lead to inconsistencies in the smcd_dev_list and potentially cause subsequent operations to fail or result in unexpected behavior.
To fix this vulnerability, users should update their Linux Kernel to version v5.10.42 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
