Unexported xfrm4_protocol_init() in Kernel
Summary
GSD-2022-1003259: net: xfrm: unexport __init-annotated xfrm4_protocol_init(). Affects Kernel versions >= 2f32b51b609faea1e40bb8c5bd305f1351740936, < 85a055c03691e51499123194a14a0c249cf33227. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and supports various subsystems. The xfrm4_protocol_init() function is part of the networking subsystem and is responsible for initializing the IPv4 protocol for IPsec (Internet Protocol Security) transformations. This protocol is crucial for secure communication over IP networks.
Vulnerability Detail
The xfrm4_protocol_init() function was unintentionally left unexported in the Kernel, making it inaccessible to external modules. This vulnerability was introduced in version v3.15 of the Kernel and was fixed in version v5.15.47. The impact and attack plausibility of this vulnerability have not been proven yet. However, potential security risks may arise due to the inability to utilize or modify the xfrm4_protocol_init() function externally. Further analysis is required to determine the exact consequences of this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability primarily affects the Kernel, there is no specific workaround available. It is essential to update the Kernel to the fixed version to address the issue effectively.
Conclusion
The unexported xfrm4_protocol_init() vulnerability in the Linux Kernel can potentially impact the functionality and customization of IPsec transformations. To mitigate this issue, it is crucial to update the Kernel to version v5.15.47 or later, which includes the necessary fix. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The xfrm4_protocol_init() function is responsible for initializing the IPv4 protocol for IPsec transformations in the Linux Kernel. It enables secure communication over IP networks by handling the necessary transformations and encryption.
The vulnerability was introduced in version v3.15 of the Linux Kernel due to an oversight in the exportation of the xfrm4_protocol_init() function. It remained unexported until it was fixed in version v5.15.47.
The exact security risks are yet to be determined. However, the inability to access or modify the xfrm4_protocol_init() function externally may limit the functionality and customization of IPsec transformations in the Kernel. This could potentially impact the security of IP network communications.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, and you can upload your manifest file (e.g., package-lock.json) to check for vulnerabilities without requiring code access or installation.
For more details about this vulnerability, you can refer to the vulnerability ID GSD-2022-1003259 in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003259.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
