Vulnerability in Kernel: pch_can_rx_normal: Use After Free
Summary
GSD-2021-1002363: can: pch_can: pch_can_rx_normal: fix use after free. Affects Kernel versions >= b21d18b51b31a24d17f883b678432fbdee3d5675, < bafe343a885c70dddf358379cf0b2a1c07355d8d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a crucial component of the Linux operating system that acts as an interface between the hardware and software layers. It provides essential functionalities and services to enable the proper functioning of the system. The pch_can module within the Kernel is responsible for handling Controller Area Network (CAN) communication. CAN is a widely used protocol for communication between microcontrollers and devices in automotive and industrial applications. The pch_can_rx_normal function in the pch_can module is vulnerable to a use after free issue.
Vulnerability Detail
The vulnerability in the pch_can_rx_normal function allows an attacker to exploit a use after free issue. This occurs when the function continues to access memory that has already been freed. By manipulating certain CAN messages, an attacker can trigger this vulnerability and potentially execute arbitrary code or cause a denial of service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
The vulnerability has been fixed in the Linux Kernel version v4.4.295. To mitigate the issue, it is recommended to update the Kernel to this version or a later one. Users can obtain the updated Kernel from the official Linux Kernel repository. The fix was implemented in commit bafe343a885c70dddf358379cf0b2a1c07355d8d.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The pch_can_rx_normal function in the Kernel's pch_can module is vulnerable to a use after free issue. This vulnerability can potentially be exploited by an attacker to execute arbitrary code or cause a denial of service. It is crucial to update the Kernel to version v4.4.295 or a later one to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The pch_can module is a component of the Linux Kernel that handles Controller Area Network (CAN) communication. It enables communication between microcontrollers and devices in automotive and industrial applications.
A use after free vulnerability occurs when a program continues to access memory that has already been freed. This can lead to various security issues, including the potential execution of arbitrary code or denial of service.
An attacker can exploit this vulnerability by manipulating certain CAN messages to trigger the use after free issue in the pch_can_rx_normal function. This can potentially allow the attacker to execute arbitrary code or cause a denial of service.
No, the impact and attack plausibility of this vulnerability have not been proven yet. Further analysis and testing are required to determine the actual impact.
The fixed version of the Linux Kernel can be obtained from the official Linux Kernel repository. Users are recommended to update to version v4.4.295 or a later one.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.