Out-of-Bound Read Vulnerability in scsi_debug
Summary
GSD-2021-1002336: scsi: scsi_debug: Fix out-of-bound read in resp_readcap16(). Affects Kernel versions < 5b8bed6464ad6653586e30df046185fd816ad999. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The scsi_debug package is a SCSI target driver that allows the creation of virtual SCSI devices for testing and debugging purposes. It is commonly used in Linux systems. This vulnerability affects the scsi_debug driver and can lead to an out-of-bound read in the resp_readcap16() function.
Vulnerability Detail
The resp_readcap16() function in the scsi_debug driver is vulnerable to an out-of-bound read. This vulnerability could be exploited by an attacker to read sensitive information from kernel memory or cause a denial-of-service condition. The issue has been fixed in the Linux Kernel version v5.15.5 by commit 5b8bed6464ad6653586e30df046185fd816ad999.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel.
Conclusion
The out-of-bound read vulnerability in the scsi_debug driver can have serious security implications. It is crucial to update the Linux Kernel to version v5.15.5 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
scsi_debug is a SCSI target driver used for testing and debugging virtual SCSI devices.
An out-of-bound read vulnerability occurs when a program accesses memory outside the bounds of a defined buffer. This can lead to information disclosure or a crash.
resp_readcap16() is a function in the scsi_debug driver that handles the response to a SCSI READ CAPACITY (16) command.
This vulnerability could allow an attacker to read sensitive information from kernel memory or cause a denial-of-service condition.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
