Open Source Vulnerability in Kernel: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
Summary
GSD-2021-1001220: coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer(). Affects Kernel versions >= 0c3fc4d5fa26092853278145aca9b21fa52a3e93, < 0115687be7b13993066aef602253a53d55f5b11f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It is responsible for managing system resources, including memory, processes, and device drivers. The coresight module within the Kernel is used for debugging and tracing purposes. The tmc-etf component of coresight is responsible for managing the Embedded Trace Buffer (ETB) and its associated functionality.
The vulnerability identified in tmc-etf allows for a global-out-of-bounds access in the tmc_update_etf_buffer() function. This vulnerability can potentially be exploited by an attacker to gain unauthorized access to sensitive information or execute arbitrary code on the affected system.
Vulnerability Detail
The global-out-of-bounds vulnerability in tmc-etf's tmc_update_etf_buffer() function allows an attacker to access memory outside the bounds of the allocated buffer. This can lead to information disclosure or the execution of arbitrary code. The vulnerability was introduced in version v4.14 of the Linux Kernel and has been fixed in version v5.13.3.
To exploit this vulnerability, an attacker would need to have local access to the affected system and the ability to execute malicious code. The impact and attack plausibility of this vulnerability have not been proven, but it is important to apply the fix to ensure the security and integrity of the system.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.13.3 or later. This can be done by downloading the updated Kernel source code from the official Git repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the provided instructions. Alternatively, users can wait for their Linux distribution to release an updated package containing the fixed version of the Kernel.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply the patch provided in the fix commit (0115687be7b13993066aef602253a53d55f5b11f) manually to their existing Kernel version. The patch modifies the tmc-etf module to address the global-out-of-bounds issue. Here is an example of how to apply the patch:
- Download the patch file from the commit link: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0115687be7b13993066aef602253a53d55f5b11f
- Navigate to the Kernel source code directory.
- Apply the patch using the 'git apply' command: git apply /path/to/patch/file
- Recompile and reinstall the Kernel.
Conclusion
The global-out-of-bounds vulnerability in tmc-etf's tmc_update_etf_buffer() function poses a potential security risk to systems running the affected versions of the Linux Kernel. It is crucial to update the Kernel to version v5.13.3 or later to mitigate this vulnerability. Alternatively, users can apply the provided patch manually or wait for their Linux distribution to release an updated package. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's capabilities and intentions. It could potentially lead to unauthorized access to sensitive information or the execution of arbitrary code on the affected system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities, including this one.
No, remote exploitation of this vulnerability is not possible. An attacker would need local access to the affected system to exploit the global-out-of-bounds issue in tmc-etf.
There are no reported instances of this vulnerability being exploited in the wild. However, it is always recommended to apply security patches and updates to mitigate potential risks.
Yes, you can apply the patch provided in the fix commit (0115687be7b13993066aef602253a53d55f5b11f) without updating the entire Kernel. This allows you to address the specific vulnerability while keeping the rest of your Kernel version intact.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.