UAF in tlan_remove_one in Kernel
Summary
GSD-2021-1001185: net: ti: fix UAF in tlan_remove_one. Affects Kernel versions >= 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa, < 93efab0ef2a607fff9166d447c4035f98b5db342. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The vulnerability in question, UAF (Use-After-Free), refers to a memory corruption issue that arises when a program continues to use a pointer after the memory it points to has been freed. This vulnerability can lead to various security risks, including remote code execution, privilege escalation, and denial of service attacks.
Vulnerability Detail
The UAF vulnerability in tlan_remove_one function within the Kernel affects versions v3.10 to v5.13.4. The issue was introduced in v3.10 by commit 1e0a8b13d35510e711fdf72e9a3e30bcb2bd49fa and fixed in v5.13.5 by commit 93efab0ef2a607fff9166d447c4035f98b5db342. The vulnerability allows an attacker to exploit a use-after-free condition in the tlan_remove_one function, potentially leading to arbitrary code execution or a system crash. This vulnerability can be triggered by a specially crafted network packet, making it remotely exploitable.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can consider implementing network-level mitigations such as firewall rules or network intrusion prevention systems (IPS) to filter out potentially malicious network packets that could trigger the vulnerability. However, applying the official fix by updating the Kernel is the recommended approach.
Conclusion
The UAF vulnerability in tlan_remove_one function within the Kernel poses a significant security risk, allowing for potential arbitrary code execution or system crashes. It is crucial to promptly update the Kernel to the fixed version v5.13.5 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The UAF vulnerability in tlan_remove_one can potentially allow an attacker to execute arbitrary code or crash the system, leading to a denial of service or potential privilege escalation.
Yes, this vulnerability can be exploited remotely by sending a specially crafted network packet.
The vulnerability affects versions v3.10 to v5.13.4 of the Linux Kernel.
Yes, the vulnerability has been fixed in Linux Kernel version v5.13.5 by commit 93efab0ef2a607fff9166d447c4035f98b5db342.
It is recommended to update the Linux Kernel to version v5.13.5 or later. Regularly updating the Kernel helps ensure the latest security patches are applied.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
