UAF in sata_fsl_port_stop when rmmod sata_fsl
Summary
GSD-2021-1002391: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl. Affects Kernel versions >= faf0b2e5afe7dae072d2715763c7f992b612b628, < 325ea49fc43cbc03a5e1e37de8f0ca6357ced4b1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sata_fsl package is a component of the Linux Kernel, which is responsible for handling SATA (Serial ATA) functionality on Freescale PowerPC platforms. It provides support for SATA controllers and allows communication with SATA devices such as hard drives and solid-state drives. The sata_fsl_port_stop function is a part of this package and is used to stop the SATA port during the removal of the sata_fsl module.
Vulnerability Detail
The sata_fsl_port_stop function in the sata_fsl package suffers from a Use-After-Free (UAF) vulnerability. When the sata_fsl module is unloaded (rmmod), the sata_fsl_port_stop function is called to stop the SATA port. However, due to a programming error, the function does not properly handle the removal of the module, leading to a UAF condition. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The sata_fsl package in the Linux Kernel is vulnerable to a Use-After-Free (UAF) issue in the sata_fsl_port_stop function. This vulnerability can potentially be exploited to execute arbitrary code or cause a denial-of-service (DoS) condition. It is crucial to update the Linux Kernel to version v4.14.257 or later to fix this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. It analyzes the manifest file (e.g., package-lock.json) of your application and provides real-time alerts for open-source vulnerabilities.
At the time of this report, there is no known exploit available for this vulnerability. However, it is important to apply the recommended fix to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely if the affected system is accessible over the network.
The recommended solution is to update the Linux Kernel to the fixed version. However, if updating is not feasible, implementing strong network security measures and access controls can help mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
