Repeated Call to hns3_nic_net_open in net: hns3
Summary
GSD-2021-1001592: net: hns3: do not allow call hns3_nic_net_open repeatedly. Affects Kernel versions >= e888402789b9db5de4fcda361331d66dbf0cd9fd, < 5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: hns3 package is a part of the Linux Kernel ecosystem. It provides network driver support for Huawei HiSilicon Network Subsystem 3 (HNS3) Ethernet controllers. The hns3_nic_net_open function is responsible for opening the network device and initializing its resources. However, a vulnerability exists in this package that allows for the repeated invocation of hns3_nic_net_open, leading to potential security issues.
Vulnerability Detail
The vulnerability in net: hns3 arises from the ability to call hns3_nic_net_open repeatedly. This can result in various security risks, although the exact impact and plausibility of an attack have not been proven. The vulnerability was introduced in version v5.0 of the Linux Kernel by commit e888402789b9db5de4fcda361331d66dbf0cd9fd. It has been fixed in version v5.4.151 by commit 5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The net: hns3 package in the Linux Kernel is vulnerable to a security issue that allows for the repeated invocation of hns3_nic_net_open. This vulnerability has been addressed in version v5.4.151 of the Linux Kernel. It is recommended to update to this version or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: hns3 package is a network driver for Huawei HiSilicon Network Subsystem 3 (HNS3) Ethernet controllers in the Linux Kernel.
hns3_nic_net_open is a function in the net: hns3 package responsible for opening the network device and initializing its resources.
Calling hns3_nic_net_open repeatedly can lead to potential security risks, although the exact impact and plausibility of an attack have not been proven.
The vulnerability was introduced in version v5.0 of the Linux Kernel by commit e888402789b9db5de4fcda361331d66dbf0cd9fd.
The vulnerability was fixed in version v5.4.151 of the Linux Kernel by commit 5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
