Use-after-free vulnerability in atm: nicstar
Summary
GSD-2021-1001397: atm: nicstar: Fix possible use-after-free in nicstar_cleanup(). Affects Kernel versions < a7a7b2848312cc4c3a42b6e42a8ab2e441857aba. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The atm: nicstar package is a component of the Linux Kernel, which is responsible for handling Asynchronous Transfer Mode (ATM) network interfaces. It provides the necessary drivers and functionality for ATM devices to communicate with the operating system. The nicstar module specifically deals with NICStAR-based ATM cards. These cards are used in various networking applications to enable ATM connectivity. However, a use-after-free vulnerability has been identified in the nicstar_cleanup() function of the nicstar module.
Vulnerability Detail
The use-after-free vulnerability in atm: nicstar arises when the nicstar_cleanup() function is called. This function is responsible for cleaning up resources and freeing memory allocated by the nicstar module. However, due to a programming error, there is a possibility of accessing freed memory after it has been released. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The use-after-free vulnerability in atm: nicstar can be mitigated by updating the Linux Kernel to version v4.19.198 or later. This ensures that the necessary fix for the vulnerability is applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The atm: nicstar package is a component of the Linux Kernel that handles ATM network interfaces, specifically NICStAR-based ATM cards.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to various security issues, including arbitrary code execution or denial-of-service attacks.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version v4.19.198 or later, which includes the necessary fix for the use-after-free vulnerability in the nicstar module.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
