Double Free Issue in net: marvell: prestera
Summary
GSD-2021-1002472: net: marvell: prestera: fix double free issue on err path. Affects Kernel versions >= e1189d9a5fbec8153dbe03f3589bc2baa96694e2, < 5dca8eff4627315df98feec09fff9dfe3356325e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: marvell: prestera package is a component of the Linux Kernel, which is responsible for managing network functionality. It includes drivers and protocols that enable communication between devices and networks. The prestera module specifically handles Marvell Prestera Ethernet switches. These switches are commonly used in data centers and enterprise networks to provide high-performance and reliable network connectivity.
Vulnerability Detail
The identified vulnerability in the net: marvell: prestera package is a double free issue that occurs on the error path. A double free vulnerability refers to a situation where a program attempts to free a memory block that has already been freed. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial of service. The vulnerability was introduced in version v5.10 of the Linux Kernel and was fixed in version v5.10.83 by commit 5dca8eff4627315df98feec09fff9dfe3356325e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating to the latest version of the Linux Kernel.
Conclusion
The double free issue in the net: marvell: prestera package has been identified and fixed in the Linux Kernel version v5.10.83. Users are advised to update their kernel to the latest version to mitigate the vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net: marvell: prestera package is a component of the Linux Kernel that handles Marvell Prestera Ethernet switches, providing network functionality.
A double free vulnerability occurs when a program attempts to free a memory block that has already been freed, potentially leading to memory corruption and security issues.
The double free issue in the net: marvell: prestera package could allow an attacker to execute arbitrary code or cause a denial of service.
To fix this vulnerability, it is recommended to update to the latest version of the Linux Kernel (v5.10.83 or later).
There is no specific workaround mentioned for this vulnerability. Updating to the latest version of the Linux Kernel is the recommended approach.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
