net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
Summary
GSD-2021-1002476: net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk(). Affects Kernel versions >= cb9d43f6775457cac75544bc4197f26ac2b6f294, < c94cbd262b6aa3b54d73a1ed1f9c0d19df57f4ff. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services to enable the execution of programs and manages system resources. The smc_vlan_by_tcpsk() function in the net/smc module is responsible for retrieving the VLAN ID associated with a given TCP socket. However, a vulnerability in this function allows for NULL pointer dereferencing, which can lead to a system crash or potential privilege escalation.
Vulnerability Detail
The vulnerability arises from a NULL pointer dereference in the smc_vlan_by_tcpsk() function. An attacker can exploit this vulnerability by sending specially crafted network packets to a vulnerable system, causing the function to dereference a NULL pointer. This can result in a system crash or potentially allow the attacker to execute arbitrary code with elevated privileges. The vulnerability was introduced in Linux Kernel version 4.18 and is fixed in version 5.10.83.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to mitigate the risk.
Conclusion
The NULL pointer dereferencing vulnerability in the smc_vlan_by_tcpsk() function of the net/smc module in the Linux Kernel can lead to system crashes or potential privilege escalation. It is crucial to update the Linux Kernel to version 5.10.83 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system crash or potential privilege escalation, allowing an attacker to execute arbitrary code with elevated privileges.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the time of this report, there is no known public exploit for this vulnerability. However, it is crucial to apply the recommended fix to mitigate the risk.
Yes, this vulnerability can be exploited remotely by sending specially crafted network packets to a vulnerable system.
Unfortunately, there are no known mitigations available for this vulnerability other than updating the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
