Vulnerability in Kernel: rxrpc listen() Function
Summary
GSD-2022-1003336: rxrpc: Fix listen() setting the bar too high for the prealloc rings. Affects Kernel versions >= 00e907127e6f86d0f9b122d9b4347a8aa09a8b61, < b3a9b227d5e7467b8518160ff034ea22bb9de573. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures security and stability. The rxrpc module within the Kernel is responsible for implementing the Reliable Datagram Sockets (rxrpc) protocol, which enables reliable and ordered delivery of datagrams over an unreliable network. This vulnerability affects the listen() function in the rxrpc module.
Vulnerability Detail
The vulnerability in the rxrpc listen() function was introduced in version v4.9 of the Linux Kernel and has been fixed in version v5.15.46. The issue arises from the listen() function setting the bar too high for the preallocated rings. While the exact impact and attack plausibility have not been proven, this vulnerability could potentially be exploited to cause denial-of-service (DoS) attacks or other security breaches. Further technical details can be found in the references link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to follow the recommended fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the rxrpc listen() function of the Kernel has been identified and fixed in version v5.15.46. To ensure the security and stability of your system, it is crucial to update the Linux Kernel to the latest version. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that provides core functionality and acts as an interface between hardware and software.
The rxrpc module is responsible for implementing the Reliable Datagram Sockets (rxrpc) protocol, which enables reliable and ordered delivery of datagrams over an unreliable network.
The exact impact of this vulnerability has not been proven, but it could potentially be exploited to cause denial-of-service (DoS) attacks or other security breaches.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.46 or later, which includes the necessary fix.
There is no specific workaround mentioned for this vulnerability. It is advised to update the Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
