Vulnerability in Kernel: tty: goldfish: Fix free_irq() on remove
Summary
GSD-2022-1004308: tty: goldfish: Fix free_irq() on remove. Affects Kernel versions >= 465893e18878e119d8d0255439fad8debbd646fd, < a6fcd7ffd76a9c1d998a2d02d518c78a55c5bed8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between processes, and handles device drivers. The tty subsystem within the Kernel is responsible for managing terminal devices, such as serial ports and virtual consoles. The goldfish driver is specifically designed for the Android emulator and provides support for virtual serial ports. However, a vulnerability has been identified in the goldfish driver's handling of free_irq() during device removal.
Vulnerability Detail
The vulnerability in the goldfish driver's free_irq() implementation can lead to a use-after-free scenario. When a device using the goldfish driver is removed, the free_irq() function is called to release the interrupt request (IRQ) associated with the device. However, due to a coding error, the IRQ is not properly freed, resulting in a potential use-after-free vulnerability. An attacker with local access to the system could exploit this vulnerability to gain elevated privileges or execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected goldfish driver by blacklisting it. This can be achieved by adding the driver's module name to the blacklist configuration file. For example, to blacklist the goldfish driver, add the following line to the blacklist file (/etc/modprobe.d/blacklist.conf):
blacklist goldfish
After adding the blacklist entry, restart the system for the changes to take effect. However, it is strongly recommended to apply the official fix by updating the Kernel as soon as possible.
Conclusion
The vulnerability in the goldfish driver's free_irq() function can lead to a use-after-free scenario, potentially enabling an attacker to gain elevated privileges or execute arbitrary code. It is crucial to update the Linux Kernel to version v5.18.6 or later to mitigate this vulnerability. In the meantime, users can apply a temporary workaround by blacklisting the goldfish driver. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially allow an attacker with local access to the system to gain elevated privileges or execute arbitrary code.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
Yes, a temporary workaround is to blacklist the goldfish driver. However, it is strongly recommended to apply the official fix by updating the Kernel to the latest version.
The updated Linux Kernel can be obtained from the official Linux Kernel repository. You can visit the repository's website (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) to access the latest version and follow the installation instructions provided by your distribution.
After updating the Kernel, you can use the Vulert Playground (https://vulert.com/scanner) to recheck your package-lock.json file. Vulert will analyze it in real-time and notify you if the vulnerability is no longer present.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
