UAF Vulnerability in net: qcom/emac
Summary
GSD-2021-1001377: net: qcom/emac: fix UAF in emac_remove. Affects Kernel versions >= 54e19bc74f3380d414681762ceed9f7245bc6a6e, < 11e9d163d631198bb3eb41a677a61b499516c0f7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net: qcom/emac package is a component of the Linux Kernel, specifically designed for Qualcomm Ethernet MAC (Media Access Control) controllers. It provides the necessary drivers and functionality for these controllers to operate within the Linux operating system. The package is responsible for managing the communication between the Ethernet hardware and the kernel, enabling network connectivity for devices that utilize Qualcomm Ethernet MAC controllers.
Vulnerability Detail
The UAF (Use-After-Free) vulnerability in the net: qcom/emac package occurs in the emac_remove function. This vulnerability allows an attacker to exploit a use-after-free condition, where a reference to a deallocated object is still used. By manipulating this vulnerability, an attacker could potentially execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability was introduced in version v4.9 of the Linux Kernel and was fixed in version v4.19.199 by commit 11e9d163d631198bb3eb41a677a61b499516c0f7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The UAF vulnerability in the net: qcom/emac package can pose a significant risk to systems utilizing Qualcomm Ethernet MAC controllers. It is crucial to update the Linux Kernel to version v4.19.199 or later to mitigate this vulnerability. Promptly applying security patches and updates is essential to ensure the security and stability of the affected systems. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can vary depending on the attacker's capabilities and the system's configuration. In worst-case scenarios, an attacker could execute arbitrary code or cause a denial-of-service (DoS) condition, potentially leading to a complete system compromise or disruption of network connectivity.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software, without requiring access to the code or installation.
There are no known instances of this vulnerability being exploited in the wild. However, it is always recommended to apply security patches and updates promptly to mitigate potential risks.
Yes, this vulnerability can be exploited remotely if the affected system is accessible over the network. Attackers can potentially exploit this vulnerability by sending specially crafted network packets to the targeted system.
For more detailed information about this vulnerability, including technical details and the specific code changes that fix the issue, you can refer to the vulnerability database entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001377.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
