Vulnerability in Kernel: bpf: Fix request_sock leak in sk lookup helpers
Summary
GSD-2022-1004475: bpf: Fix request_sock leak in sk lookup helpers. Affects Kernel versions >= f7355a6c049711ecfbeed573e43d48bee7acb83a, < b03607437ea81b850599f705096b05b85e7a4a71. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between processes, and ensures security and stability. The vulnerability in question affects the Kernel's bpf (Berkeley Packet Filter) module, which is responsible for packet filtering and network monitoring. The bpf module includes sk (socket) lookup helpers that assist in searching for sockets. However, due to a flaw introduced in version v5.2 and fixed in v5.15.51, these helpers can cause a request_sock leak. This vulnerability could potentially be exploited by attackers to exhaust system resources and disrupt network communication.
Vulnerability Detail
The vulnerability arises from a request_sock leak in the sk lookup helpers of the Kernel's bpf module. When performing socket lookups, the helpers fail to release request_sock objects, leading to a resource leak. This can result in the depletion of system resources, such as memory, and potentially lead to denial-of-service (DoS) conditions. The impact and attack plausibility of this vulnerability have not been proven yet, but it is crucial to address it to ensure the stability and security of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
The vulnerability in the Kernel's bpf module, which causes a request_sock leak in sk lookup helpers, can potentially lead to resource exhaustion and disrupt network communication. It is crucial to update the Linux Kernel to version v5.15.51 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software.
The bpf (Berkeley Packet Filter) module is a part of the Kernel that enables packet filtering and network monitoring.
Sk lookup helpers are functions in the bpf module that assist in searching for sockets.
A request_sock is a data structure used in networking to represent a pending connection request.
This vulnerability can lead to resource exhaustion, such as memory depletion, and potentially result in denial-of-service (DoS) conditions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
