mld: fix panic in mld_newpack() - Kernel
Summary
GSD-2021-1000699: mld: fix panic in mld_newpack(). Affects Kernel versions >= 72e09ad107e78d69ff4d3b97a69f0aad2b77280f, < 0e35b7457b7b6e73ffeaaca1a577fdf1af0feca1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between processes, and handles device drivers. The mld_newpack() function is part of the Multicast Listener Discovery (MLD) protocol implementation in the Kernel. MLD is used for IPv6 multicast group management. This vulnerability in mld_newpack() can lead to a panic, causing the system to crash.
Vulnerability Detail
The vulnerability in mld_newpack() was introduced in version v2.6.35 of the Linux Kernel by commit 72e09ad107e78d69ff4d3b97a69f0aad2b77280f. It was fixed in version v4.4.271 by commit 0e35b7457b7b6e73ffeaaca1a577fdf1af0feca1. When triggered, the vulnerability can result in a panic, leading to a system crash. The exact impact and attack plausibility have not been proven yet. It is important to update to a fixed version of the Kernel to mitigate this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The mld_newpack() vulnerability in the Kernel can result in a system crash. It is crucial to update the Linux Kernel to version v4.4.271 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a panic in the Kernel, causing the system to crash.
You can check the version of your Linux Kernel using the 'uname -r' command. If your Kernel version is earlier than v4.4.271, your system may be affected.
At the time of this report, no known exploits for this vulnerability have been disclosed.
The remote exploitability of this vulnerability has not been determined yet.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel to a fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
