Prohibited Improper Channel Configuration for DCB in ice: ethtool
Summary
GSD-2022-1004258: ice: ethtool: Prohibit improper channel config for DCB. Affects Kernel versions >= 87324e747fde7693620f6d4c74aa11b7551e096d, < 4520c4bf4dca7aa285f30cb1ca8c08c531bbf0e9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ice: ethtool package is a component of the Linux Kernel ecosystem. It provides a set of tools for configuring Ethernet devices. The package includes functionality for managing Data Center Bridging (DCB), which allows for the allocation of bandwidth and priority levels for different traffic classes. However, a vulnerability has been discovered in the package that allows for improper channel configuration for DCB.
Vulnerability Detail
The vulnerability in ice: ethtool allows for improper channel configuration for DCB. This can lead to various security issues, although the exact impact and attack plausibility have not been proven. The vulnerability was introduced in version v5.5 of the Linux Kernel and has been fixed in version v5.18.8. The vulnerability is identified by the ID GSD-2022-1004258.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in ice: ethtool that allows for improper channel configuration for DCB has been identified and fixed in version v5.18.8 of the Linux Kernel. Users are advised to update their kernel to the latest version to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ice: ethtool is a package in the Linux Kernel ecosystem that provides tools for configuring Ethernet devices.
DCB stands for Data Center Bridging. It is a set of Ethernet enhancements that allow for the allocation of bandwidth and priority levels for different traffic classes.
The exact impact of this vulnerability is not yet proven. However, it can potentially lead to security issues.
To fix this vulnerability, update the Linux Kernel to version v5.18.8 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
