Vulnerability in Linux Kernel: net: sched: flower: protect fl_walk() with rcu
Summary
GSD-2021-1001644: net: sched: flower: protect fl_walk() with rcu. Affects Kernel versions >= d39d714969cda5cbda291402c8c6b1fb1047f42e, < d0d520c19e7ea19ed38dc5797b12397b6ccf9f88. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionality. It is a widely used open-source package that powers numerous devices and servers. The net subsystem within the Linux Kernel handles network-related operations, including traffic control and packet filtering. One of the components in the net subsystem is the sched module, which implements various scheduling algorithms. The flower module within sched is used for flow-based packet filtering. Unfortunately, a vulnerability has been discovered in the flower module that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the flower module of the Linux Kernel's sched component arises from a lack of proper protection in the fl_walk() function. This function is used to traverse the flow rules stored in the flower module. Without proper protection, concurrent access to the flow rules can lead to race conditions and potential security issues. Attackers may be able to manipulate the flow rules or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been fully proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
In conclusion, a vulnerability has been discovered in the flower module of the Linux Kernel's sched component. This vulnerability can potentially be exploited by attackers to manipulate flow rules or cause a denial-of-service condition. Users are advised to update their Linux Kernel to version v5.10.71 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionality.
The net subsystem in the Linux Kernel handles network-related operations, including traffic control and packet filtering.
The sched module in the net subsystem implements various scheduling algorithms.
The flower module in the sched component is used for flow-based packet filtering.
The impact of this vulnerability is not fully proven yet. However, it could potentially allow attackers to manipulate flow rules or cause a denial-of-service condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
