net: ll_temac: Make sure to free skb when it is completely used
Summary
GSD-2021-1001005: net: ll_temac: Make sure to free skb when it is completely used. Affects Kernel versions < 019ab7d044d0ebf97e1236bb8935b7809be92358. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'll_temac' package is a network driver for the Xilinx TEMAC Ethernet controller. It provides functionality for transmitting and receiving network packets. The vulnerability in this package relates to the improper handling of 'skb' (socket buffer) objects, which can lead to resource leaks and potential security issues.
Vulnerability Detail
The vulnerability in 'll_temac' arises from the failure to properly free 'skb' objects when they are completely used. This can result in resource leaks, where memory is not released after it is no longer needed. An attacker may be able to exploit this vulnerability to exhaust system resources, leading to denial of service or potential privilege escalation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The 'll_temac' package in the Linux Kernel is vulnerable to a resource leak issue related to the improper handling of 'skb' objects. It is important to update to the fixed version of the package (v5.10.46) to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to resource leaks, denial of service, or privilege escalation.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and it will alert you in real-time.
There is no known exploit for this vulnerability at the moment. However, it is important to apply the fix to prevent any potential exploitation.
This vulnerability specifically affects the 'll_temac' package in the Linux Kernel. However, it is always recommended to keep all packages and dependencies up to date to mitigate potential security risks.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001005.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
