Vulnerability in Kernel: cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle
Summary
GSD-2022-1004489: cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle. Affects Kernel versions >= cf68fffb66d60d96209446bfc4a15291dc5a5d41, < 75f3a5fa2ad049c85ab5d5ee1ed9cfaa7e62c5ed. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and provides an interface for applications to interact with the hardware. It is responsible for tasks such as process management, memory management, and device drivers. The vulnerability in question affects the Kernel's Control Flow Integrity (CFI) mechanism, specifically the __cfi_slowpath_diag function when used in conjunction with cpuidle. CFI is a security feature that helps protect against control flow hijacking attacks. However, due to improper RCU (Read-Copy Update) usage, this vulnerability can be exploited to bypass CFI protections.
Vulnerability Detail
The vulnerability arises from a flaw in the __cfi_slowpath_diag function's RCU usage when cpuidle is involved. An attacker could potentially exploit this vulnerability to bypass CFI protections and execute arbitrary code. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.15.49 by commit 75f3a5fa2ad049c85ab5d5ee1ed9cfaa7e62c5ed. However, it was introduced in version v5.13 by commit cf68fffb66d60d96209446bfc4a15291dc5a5d41.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the Kernel's Control Flow Integrity (CFI) mechanism, specifically the __cfi_slowpath_diag function with cpuidle, can be exploited to bypass CFI protections. It is crucial to update the Linux Kernel to version v5.15.49 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that manages the system's resources and provides an interface for applications to interact with the hardware.
Control Flow Integrity (CFI) is a security feature that helps protect against control flow hijacking attacks by enforcing a strict control flow within a program.
This vulnerability can be exploited by an attacker to bypass CFI protections and execute arbitrary code.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.15.49 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
