Use-after-free vulnerability in smsc75xx_bind in Kernel
Summary
GSD-2021-1001068: net: usb: fix possible use-after-free in smsc75xx_bind. Affects Kernel versions >= 70c886ac93f87ae7214a0c69151a28a8075dd95b, < 14616c372a7be01a2fb8c56c9d8debd232b9e43d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and manages system resources. It acts as an interface between the hardware and software layers, facilitating communication and coordination between various components. The smsc75xx_bind function in the Kernel's USB network driver is responsible for binding the SMSC75XX USB Ethernet device. This driver enables network connectivity over USB for devices using the SMSC75XX chipset. However, a use-after-free vulnerability has been identified in the smsc75xx_bind function, which could potentially be exploited by an attacker.
Vulnerability Detail
The use-after-free vulnerability in smsc75xx_bind arises from improper handling of USB network devices. When a network device is unbound, the smsc75xx_bind function fails to properly release the associated resources, leading to a use-after-free condition. An attacker could potentially exploit this vulnerability by manipulating the USB network device in a specific way, causing the use-after-free condition to occur. This could result in various consequences, such as system crashes, privilege escalation, or arbitrary code execution.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the use of USB network devices that rely on the smsc75xx_bind function. This can be achieved by blacklisting the relevant kernel module or preventing the module from loading. However, this workaround may result in the loss of USB network functionality for devices using the SMSC75XX chipset.
Conclusion
In conclusion, the use-after-free vulnerability in the smsc75xx_bind function of the Kernel's USB network driver poses a potential security risk. It is crucial to update the Linux Kernel to version v5.12.13 or later to mitigate this vulnerability. Users can also utilize the Vulert Playground at https://vulert.com/scanner to check if their system is affected and receive real-time alerts for open-source vulnerabilities. For further assistance, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to system crashes, privilege escalation, or arbitrary code execution.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this use-after-free vulnerability in the Kernel's smsc75xx_bind function.
At the time of this report, there are no known public exploits targeting this specific vulnerability. However, it is crucial to apply the recommended fix to mitigate any potential risks.
While it is technically possible to manually patch the affected code, it is highly recommended to update the entire Linux Kernel to the fixed version. Manually patching the code may introduce errors or inconsistencies, and it may be challenging for non-experts to ensure the patch is correctly applied.
For further support and assistance with vulnerability remediation, you can reach out to info@devnack.com. Our team of experts will be happy to provide guidance and help ensure the security of your system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
