net: ll_temac: Make sure to free skb when it is completely used
Summary
GSD-2021-1001088: net: ll_temac: Make sure to free skb when it is completely used. Affects Kernel versions < e8afe05bd359ebe12a61dbdc94c06c00ea3e8d4b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ll_temac is a network driver in the Linux Kernel that provides support for the Xilinx TEMAC Ethernet controller. It is responsible for managing the transmission and reception of network packets. The vulnerability in this driver relates to the improper handling of network packets, leading to a potential memory leak.
Vulnerability Detail
The vulnerability in the ll_temac driver arises from a failure to properly free network packets (skb) when they are completely used. This can result in a memory leak, where memory resources are not released after use, leading to potential performance degradation and exhaustion of system resources. An attacker may be able to exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by ensuring they have updated to the fixed version of the Linux Kernel.
Conclusion
The ll_temac driver in the Linux Kernel is vulnerable to a memory leak issue, which can lead to performance degradation and resource exhaustion. It is recommended to update the kernel to version v5.12.13 or later to fix this vulnerability. If unable to update, applying the specific commit manually is an alternative. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ll_temac is a network driver in the Linux Kernel that provides support for the Xilinx TEMAC Ethernet controller.
The vulnerability can result in a memory leak, leading to potential performance degradation and exhaustion of system resources. It may also allow an attacker to cause a denial-of-service condition or potentially execute arbitrary code.
To fix this vulnerability, update the Linux Kernel to version v5.12.13 or later. Alternatively, apply the specific commit (e8afe05bd359ebe12a61dbdc94c06c00ea3e8d4b) manually if unable to update to the latest kernel version.
There is no specific workaround provided for this vulnerability. However, updating to the fixed version of the Linux Kernel can mitigate the risk.
The exact exploitability of this vulnerability is not known. However, if successfully exploited, it could potentially allow remote attackers to cause a denial-of-service condition or execute arbitrary code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
