Vulnerability in Kernel: bpf: Fix request_sock leak in sk lookup helpers
Summary
GSD-2022-1004747: bpf: Fix request_sock leak in sk lookup helpers. Affects Kernel versions >= f7355a6c049711ecfbeed573e43d48bee7acb83a, < 8ffe2e50e9678c8373027492035f094b130437f1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between processes, and handles various tasks such as memory management and device drivers. The vulnerability in question affects the Kernel's bpf (Berkeley Packet Filter) module, which is responsible for packet filtering and network monitoring. The bpf module includes sk (socket) lookup helpers that assist in searching for sockets based on specific criteria.
Vulnerability Detail
The identified vulnerability in the bpf module's sk lookup helpers results in a request_sock leak. This leak occurs when a request socket (request_sock) is not properly released after use, leading to resource exhaustion and potential denial-of-service (DoS) attacks. An attacker could exploit this vulnerability by repeatedly creating and not closing request sockets, causing the system to run out of resources and become unresponsive. The vulnerability was introduced in version v5.2 of the Linux Kernel and was fixed in version v5.4.202.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the vulnerability in the Kernel's bpf module's sk lookup helpers can result in a request_sock leak, leading to resource exhaustion and potential DoS attacks. It is crucial to update the Linux Kernel to version v5.4.202 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion and potential denial-of-service (DoS) attacks, causing the affected system to become unresponsive.
An attacker can exploit this vulnerability by repeatedly creating and not closing request sockets, consuming system resources and causing a DoS condition.
The vulnerability was introduced in version v5.2 of the Linux Kernel. Versions prior to v5.4.202 are affected.
Yes, the vulnerability has been fixed in version v5.4.202 of the Linux Kernel.
For more details about this vulnerability, you can refer to the source link in the database-specific information of the vulnerability report: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1004xxx/GSD-2022-1004747.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
