net: tun: avoid disabling NAPI twice in Kernel
Summary
GSD-2022-1004435: net: tun: avoid disabling NAPI twice. Affects Kernel versions >= 92e4f3ee5831e025a5bcd81782b1d41b27a90c52, < c28f955155037586132f8aad573e06a41d260038. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides low-level services to other parts of the system. It manages system resources, facilitates communication between hardware and software, and ensures the overall stability and security of the system. The tun module in the Kernel is responsible for creating virtual network interfaces and implementing network tunneling protocols. It allows applications to send and receive network packets as if they were directly connected to a physical network. However, a vulnerability has been discovered in the tun module that can lead to the double disabling of NAPI (New API) for network interfaces, potentially causing performance degradation and network connectivity issues.
Vulnerability Detail
The vulnerability in the tun module occurs when NAPI is disabled twice for network interfaces. NAPI is a feature in the Kernel that improves network performance by offloading packet processing to dedicated hardware. When NAPI is disabled twice, it can result in unnecessary overhead and decreased network throughput. Attackers may exploit this vulnerability to disrupt network communication or launch denial-of-service attacks. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in Linux Kernel version v5.15.53 by commit 92e4f3ee5831e025a5bcd81782b1d41b27a90c52 and fixed in version v5.15.53 by commit c28f955155037586132f8aad573e06a41d260038.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the tun module of the Kernel, which can result in the double disabling of NAPI for network interfaces, has been identified. It is recommended to update the Kernel to version v5.15.53 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that provides low-level services to other parts of the system. It manages system resources, facilitates communication between hardware and software, and ensures the overall stability and security of the system.
The tun module in the Kernel is responsible for creating virtual network interfaces and implementing network tunneling protocols. It allows applications to send and receive network packets as if they were directly connected to a physical network.
NAPI (New API) is a feature in the Kernel that improves network performance by offloading packet processing to dedicated hardware. It helps in reducing CPU overhead and increasing network throughput.
The double disabling of NAPI for network interfaces can lead to performance degradation and network connectivity issues. Attackers may exploit this vulnerability to disrupt network communication or launch denial-of-service attacks.
To fix this vulnerability, it is recommended to update the Kernel to version v5.15.53 or later. The fix for this vulnerability is included in the mentioned commit c28f955155037586132f8aad573e06a41d260038.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
