Missing TID Updates on Slab Deactivation in mm/slub
Summary
GSD-2022-1004831: mm/slub: add missing TID updates on slab deactivation. Affects Kernel versions >= c17dda40a6a4ed95f035db38b7ba4fab0d99da44, < e2b2f0e2e34d71ae6c2a1114fd3c525930e84bc7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mm/slub package is a memory management subsystem in the Linux Kernel. It provides an efficient and scalable memory allocator for kernel objects. The package manages memory allocation and deallocation using slabs, which are fixed-size blocks of memory. Slabs are organized into caches, and each cache is associated with a specific object type. The mm/slub package is a critical component of the Linux Kernel, responsible for managing memory resources efficiently.
Vulnerability Detail
The vulnerability in mm/slub involves missing TID (Thread ID) updates on slab deactivation. When a slab is deactivated, the TID associated with the slab is not properly updated. This can lead to potential security vulnerabilities, although the actual impact and attack plausibility have not been proven. The vulnerability was introduced in version v3.6 of the Linux Kernel and is fixed in version v4.19.252. The vulnerability can potentially be exploited to gain unauthorized access or execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.252 or later. The fix for this vulnerability was implemented in commit e2b2f0e2e34d71ae6c2a1114fd3c525930e84bc7. Updating the kernel to the latest version ensures that the missing TID updates on slab deactivation are addressed.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The mm/slub package in the Linux Kernel is vulnerable to missing TID updates on slab deactivation. This vulnerability can potentially be exploited to gain unauthorized access or execute arbitrary code. It is recommended to update the Linux Kernel to version v4.19.252 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mm/slub is a memory management subsystem in the Linux Kernel that provides an efficient and scalable memory allocator for kernel objects.
A slab in mm/slub is a fixed-size block of memory used for memory allocation and deallocation. Slabs are organized into caches, each associated with a specific object type.
The missing TID updates on slab deactivation vulnerability can potentially be exploited to gain unauthorized access or execute arbitrary code.
The vulnerability was introduced in version v3.6 of the Linux Kernel and fixed in version v4.19.252.
To fix this vulnerability, update the Linux Kernel to version v4.19.252 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.