Vulnerability in ftrace: Blindly Reading IP Address
Summary
GSD-2021-1000830: ftrace: Do not blindly read the ip address in ftrace_bug(). Affects Kernel versions >= 05736a427f7e16be948ccbf39782bd3a6ae16b14, < 0bc62e398bbd9e600959e610def5109957437b28. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ftrace package is a component of the Linux Kernel, which is responsible for tracing and debugging kernel functions. It provides a mechanism for instrumenting and monitoring the execution of code within the kernel. The ftrace_bug() function in the ftrace package is used for reporting bugs and printing error messages. However, a vulnerability has been discovered in this function, where it blindly reads the IP address without proper validation.
Vulnerability Detail
The vulnerability in ftrace arises from the ftrace_bug() function blindly reading the IP address. This can potentially lead to information disclosure or privilege escalation attacks. An attacker could exploit this vulnerability to obtain sensitive information or gain elevated privileges on a system. The vulnerability was introduced in version v2.6.28 of the Linux Kernel and has been fixed in version v4.4.273.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in ftrace that blindly reads the IP address can have serious security implications. It is crucial to update the Linux Kernel to version v4.4.273 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ftrace is a component of the Linux Kernel that provides tracing and debugging capabilities for kernel functions.
The vulnerability in ftrace could potentially lead to information disclosure or privilege escalation attacks.
You can use the Vulert playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will alert you in real-time if the vulnerability is present.
Yes, the vulnerability has been fixed in version v4.4.273 of the Linux Kernel.
You can find more information about this vulnerability in the GSD-2021-1000830.json file in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000830.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
