net:sfc: fix non-freed irq in legacy irq mode
Summary
GSD-2021-1001015: net:sfc: fix non-freed irq in legacy irq mode. Affects Kernel versions < 81c4d1d83f88e15b26f4522a35cba6ffd8c5dfdd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net:sfc package is a component of the Linux Kernel, which is responsible for managing network interfaces and protocols. It provides the necessary functionality for network communication and data transfer. The package utilizes IRQ (Interrupt Request) handling to efficiently manage hardware interrupts and ensure smooth network operations. However, a vulnerability has been discovered in the legacy IRQ mode of net:sfc, which can lead to non-freed IRQs and potential security risks.
Vulnerability Detail
The vulnerability in net:sfc arises from a flaw in the legacy IRQ mode, where IRQs are not properly freed after handling. This can result in resource leaks and potential denial-of-service attacks. An attacker could exploit this vulnerability by continuously triggering IRQs, causing the system to exhaust its resources and become unresponsive. The impact of this vulnerability can range from service disruption to complete system compromise. It is important to note that the actual attack plausibility and impact have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in net:sfc's legacy IRQ mode can lead to non-freed IRQs and potential security risks. To mitigate this issue, it is crucial to update the Linux Kernel to version v5.12.11 or later. This ensures that the necessary fix is applied and the vulnerability is addressed. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
net:sfc is a component of the Linux Kernel that handles network interfaces and protocols.
The vulnerability can lead to resource leaks and potential denial-of-service attacks, compromising the stability and availability of the system.
An attacker can continuously trigger IRQs in the legacy IRQ mode, causing resource exhaustion and system unresponsiveness.
No, the actual attack plausibility and impact have not been proven yet.
Updating the Linux Kernel to version v5.12.11 or later resolves the non-freed IRQ issue in the legacy IRQ mode of net:sfc.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
