mld: fix panic in mld_newpack() - Kernel
Summary
GSD-2021-1000647: mld: fix panic in mld_newpack(). Affects Kernel versions >= 72e09ad107e78d69ff4d3b97a69f0aad2b77280f, < 4b77ad9097067b31237eeeee0bf70f80849680a0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between processes, and handles device drivers. The mld_newpack() function in the Kernel is responsible for creating Multicast Listener Discovery (MLD) packets. MLD is a protocol used by IPv6 routers to discover multicast listeners on a network. This vulnerability in mld_newpack() can lead to a panic, causing the system to crash.
Vulnerability Detail
The vulnerability in mld_newpack() was introduced in version v2.6.35 of the Linux Kernel and is fixed in version v4.19.193. When triggered, this vulnerability can result in a panic, leading to a system crash. An attacker may be able to exploit this vulnerability to disrupt the availability of a system or potentially execute arbitrary code. The exact impact and attack plausibility have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The mld_newpack() vulnerability in the Linux Kernel can result in a system crash when triggered. It is crucial to update the Kernel to version v4.19.193 or later to mitigate this vulnerability. Keeping the Kernel up to date is essential for maintaining the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software.
mld_newpack() is a function in the Linux Kernel responsible for creating Multicast Listener Discovery (MLD) packets.
Multicast Listener Discovery (MLD) is a protocol used by IPv6 routers to discover multicast listeners on a network.
In the context of the Linux Kernel, a panic refers to a situation where the system encounters a fatal error and cannot recover, leading to a system crash.
The exact exploitation method for this vulnerability has not been proven yet. However, an attacker may be able to trigger the vulnerability to disrupt the availability of a system or potentially execute arbitrary code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
