UAF in sata_fsl_port_stop when rmmod sata_fsl
Summary
GSD-2021-1002486: sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl. Affects Kernel versions >= faf0b2e5afe7dae072d2715763c7f992b612b628, < 4a46b2f5dce02539e88a300800812bd24a45e097. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sata_fsl package is a component of the Linux Kernel, which is responsible for handling SATA (Serial ATA) controllers based on the Freescale (now NXP) platform. It provides the necessary drivers and functionality for these controllers to communicate with storage devices. The sata_fsl_port_stop function is a part of this package and is called when the sata_fsl module is being removed from the system.
Vulnerability Detail
The sata_fsl_port_stop function in the sata_fsl package suffers from a Use-After-Free (UAF) vulnerability. When the sata_fsl module is unloaded (rmmod), the sata_fsl_port_stop function is called to stop the SATA ports. However, due to a programming error, the function does not properly handle the removal of the module, leading to a UAF condition. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The sata_fsl package in the Linux Kernel is vulnerable to a Use-After-Free (UAF) issue in the sata_fsl_port_stop function. This vulnerability can be mitigated by updating the Linux Kernel to version v5.10.84 or later. No known workarounds exist for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The sata_fsl package is a component of the Linux Kernel that provides drivers and functionality for SATA controllers based on the Freescale platform.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
To fix this vulnerability, update the Linux Kernel to version v5.10.84 or later by applying commit 4a46b2f5dce02539e88a300800812bd24a45e097 from the official Linux Kernel repository.
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
For more information about this vulnerability, refer to the source link provided in the 'affected' section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
