UAF in fza_probe in Kernel
Summary
GSD-2021-1001319: net: fddi: fix UAF in fza_probe. Affects Kernel versions >= 61414f5ec9834df8aa4f55c90de16b71a3d6ca8d, < 04b06716838bfc26742dbed3ae1d3697fe5317ee. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between processes, and ensures security and stability. The fza_probe function in the Kernel's FDDI (Fiber Distributed Data Interface) module is responsible for handling FDDI network interfaces. FDDI is a high-speed networking technology commonly used in local area networks (LANs).
Vulnerability Detail
The fza_probe function in the Kernel's FDDI module suffers from a Use-After-Free (UAF) vulnerability. This vulnerability arises when the function fails to properly handle a specific scenario, leading to the use of a freed memory object. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the FDDI module if it is not required for their system. This can be achieved by removing the module or disabling it in the Kernel configuration. However, this workaround should only be considered if the FDDI functionality is not essential, as it may impact the system's network capabilities.
Conclusion
The UAF vulnerability in the fza_probe function of the Kernel's FDDI module can potentially be exploited to execute arbitrary code or cause a DoS condition. It is crucial to update the Linux Kernel to version v5.4.135 or later to mitigate this vulnerability. Disabling the FDDI module can serve as a temporary workaround if necessary. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it in real-time.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the recommended fix to mitigate any potential risks.
Disabling the FDDI module can serve as a temporary workaround if the functionality is not required. However, it is strongly recommended to update the Kernel to the patched version to fully address the vulnerability.
You can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001319.json) for more information about this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
