Use After Free Vulnerability in net: macb
Summary
GSD-2021-1001669: net: macb: fix use after free on rmmod. Affects Kernel versions < 7721221e87d25c9840d9ca6b986dbdc410d5ce2b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: macb package is a network driver for the MACB Ethernet controller. It is a part of the Linux Kernel, which is responsible for managing the core functionality of the operating system. The MACB Ethernet controller is commonly used in embedded systems and provides Ethernet connectivity. This vulnerability affects the net: macb package in the Linux Kernel.
Vulnerability Detail
The vulnerability in net: macb is a use after free issue that occurs when the package is unloaded (rmmod) from the system. A use after free vulnerability refers to a situation where a program continues to use a memory location after it has been freed. In this case, when the net: macb package is unloaded, there is a possibility of accessing freed memory, leading to potential crashes or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The use after free vulnerability in net: macb has been fixed in the Linux Kernel version v5.10.70. Users are advised to update their Linux Kernel to the latest version to ensure their systems are protected. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
net: macb is a network driver for the MACB Ethernet controller in the Linux Kernel. It provides Ethernet connectivity for embedded systems.
A use after free vulnerability occurs when a program continues to use a memory location after it has been freed. It can lead to crashes or arbitrary code execution.
The impact of this vulnerability is not yet proven. However, it could potentially lead to crashes or arbitrary code execution.
To fix this vulnerability, update your Linux Kernel to version v5.10.70 or later.
You can find more information about this vulnerability in the Linux Kernel repository and the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
