Use After Free Vulnerability in rtl8192e Driver in Linux Kernel
Summary
GSD-2021-1002386: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect(). Affects Kernel versions >= 66898177e7e5486dc77a4ba742efa4e2e9e900a4, < c0ef0e75a858cbd8618b473f22fbca36106dcf82. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rtl8192e driver is a component of the Linux Kernel, which is responsible for managing the Realtek RTL8192E wireless network adapter. This driver enables communication between the operating system and the network adapter, allowing users to connect to wireless networks and access the internet. The rtl8192e driver is part of the staging subsystem in the Linux Kernel, which means it is still under development and may contain experimental or incomplete code.
Vulnerability Detail
The identified vulnerability, labeled GSD-2021-1002386, is a use after free vulnerability in the _rtl92e_pci_disconnect() function of the rtl8192e driver. This vulnerability occurs when the driver attempts to access memory that has already been freed, leading to potential memory corruption or crashes. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS) condition on a vulnerable system. The vulnerability was introduced in version v3.2 of the Linux Kernel and has been fixed in version v4.14.257 by commit c0ef0e75a858cbd8618b473f22fbca36106dcf82.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the affected driver module by blacklisting it. This can be done by adding the following line to the appropriate configuration file (e.g., /etc/modprobe.d/blacklist.conf):
blacklist rtl8192e
After adding the line, the system needs to be rebooted or the driver module needs to be unloaded and reloaded for the changes to take effect. However, it is important to note that this workaround will disable the functionality provided by the rtl8192e driver, which may impact the ability to use the Realtek RTL8192E wireless network adapter.
Conclusion
In conclusion, the rtl8192e driver in the Linux Kernel is vulnerable to a use after free vulnerability, which could potentially allow an attacker to execute arbitrary code or cause a denial of service condition. It is recommended to update the Linux Kernel to version v4.14.257 or later to fix this vulnerability. Alternatively, users can apply a workaround by blacklisting the affected driver module, but this will disable the functionality provided by the driver. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial of service (DoS) condition on a vulnerable system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any vulnerabilities, including GSD-2021-1002386, are found.
Yes, the vulnerability has been fixed in version v4.14.257 of the Linux Kernel. It is recommended to update to this version or a later one to mitigate the vulnerability.
Yes, you can disable the affected driver module by blacklisting it. Please refer to the 'workaround' section for detailed instructions.
You can find more information about this vulnerability, including the commit that fixed it, in the GSD-2021-1002386 JSON file available on the GitHub repository of the Cloud Security Alliance's GSD database (https://github.com/cloudsecurityalliance/gsd-database).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
