Vulnerability in Linux Kernel: net: sched: flower: protect fl_walk() with rcu
Summary
GSD-2021-1001716: net: sched: flower: protect fl_walk() with rcu. Affects Kernel versions >= d39d714969cda5cbda291402c8c6b1fb1047f42e, < dab4677bdbffa5c8270e79e34e51c89efa0728a0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources, including networking, memory, and process scheduling. The net subsystem within the kernel handles network-related operations, such as packet filtering and traffic control. One component of the net subsystem is the sched module, which implements various scheduling algorithms. The flower module within sched is responsible for classifying and filtering network packets based on user-defined rules. However, a vulnerability has been discovered in the flower module that could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the flower module of the Linux Kernel's sched component arises from a lack of proper protection in the fl_walk() function. This function is used to traverse the flower classifier rules and perform operations on them. However, it is not adequately guarded by RCU (Read-Copy Update) synchronization, which can result in race conditions and potential memory corruption. An attacker could potentially exploit this vulnerability to manipulate the classifier rules or trigger a denial-of-service condition. The impact and attack feasibility of this vulnerability have not been fully established.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users who are unable to immediately update their Linux Kernel can consider disabling the flower module within the sched component. This can be achieved by modifying the kernel configuration and rebuilding the kernel without including the flower module. However, it is recommended to apply the official fix by updating to the latest kernel version as soon as possible.
Conclusion
In conclusion, a vulnerability has been identified in the flower module of the Linux Kernel's sched component. This vulnerability can potentially lead to security issues, including manipulation of classifier rules and denial-of-service conditions. Users are advised to update their Linux Kernel to the latest version, which includes the necessary fix. Alternatively, disabling the flower module can serve as a temporary workaround. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is an open-source operating system kernel that forms the core of various Linux distributions. It provides essential functionality for managing system resources and enabling the execution of user applications.
The net subsystem in the Linux Kernel is responsible for handling network-related operations, including packet filtering, traffic control, and network device management.
The sched module in the Linux Kernel implements various scheduling algorithms, allowing efficient allocation of system resources and fair execution of processes.
The flower module within the sched component is responsible for classifying and filtering network packets based on user-defined rules. It enables fine-grained control over network traffic.
The vulnerability in the flower module can potentially be exploited by an attacker to manipulate classifier rules or cause a denial-of-service condition. However, the exact attack vectors and impact of this vulnerability have not been fully determined.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
