Out-of-Bound Array Access in net: tulip: de4x5
Summary
GSD-2021-1002414: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound. Affects Kernel versions < 2c1a6a9a011d622a7c61324a97a49801ba425eff. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: tulip: de4x5 package is a component of the Linux Kernel, which is responsible for handling network communication. It includes drivers for various network interface cards. One of the drivers, de4x5, is used for DECchip 21040, 21041, and 21140 Ethernet controllers. This driver allows the Linux Kernel to communicate with these network cards and enable network connectivity on systems that use them. However, a vulnerability has been discovered in the de4x5 driver that can lead to an out-of-bound array access.
Vulnerability Detail
The vulnerability in the de4x5 driver arises from an out-of-bound array access issue. Specifically, the array 'lp->phy[8]' can be accessed beyond its bounds, potentially resulting in memory corruption or other unintended consequences. An attacker could exploit this vulnerability by sending specially crafted network packets to a system with a vulnerable version of the Linux Kernel, leading to a denial-of-service condition or potential remote code execution. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable or unload the de4x5 driver if it is not essential for their system's network connectivity. This can be achieved by executing the following command as root:
modprobe -r de4x5
Alternatively, users can blacklist the de4x5 driver to prevent it from being loaded at system startup. This can be done by adding the following line to the '/etc/modprobe.d/blacklist.conf' file:
blacklist de4x5
Conclusion
The out-of-bound array access vulnerability in the net: tulip: de4x5 package of the Linux Kernel can potentially lead to memory corruption or other unintended consequences. It is recommended to update the Linux Kernel to version v4.19.220 or later to mitigate this vulnerability. Alternatively, users can apply the provided workarounds to disable or blacklist the de4x5 driver. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: tulip: de4x5 package is a component of the Linux Kernel that provides support for DECchip 21040, 21041, and 21140 Ethernet controllers.
The impact of this vulnerability is not yet proven, but it could potentially lead to memory corruption, denial-of-service, or remote code execution.
To fix this vulnerability, update the Linux Kernel to version v4.19.220 or later.
Yes, you can disable or unload the de4x5 driver if it is not necessary for your system's network connectivity. Alternatively, you can blacklist the driver to prevent it from being loaded at system startup.
For more information about this vulnerability, you can refer to the source link provided in the database_specific field of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
