Vulnerability in Kernel: rxrpc_peer leak in rxrpc_look_up_bundle()
Summary
GSD-2021-1002565: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle(). Affects Kernel versions >= 245500d853e9f20036cec7df4f6984ece4c6bf26, < bc97458620e38961af9505cc060ad4cf5c9e4af7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures the security and stability of the system. The vulnerability in question affects the Kernel's rxrpc module, which is responsible for handling the Reliable Datagram Protocol (RxRPC) network protocol. RxRPC is used for secure and reliable communication between networked applications. The vulnerability allows for a rxrpc_peer leak in the rxrpc_look_up_bundle() function, potentially leading to resource exhaustion and denial-of-service attacks.
Vulnerability Detail
The vulnerability arises from a flaw in the rxrpc_look_up_bundle() function of the Kernel's rxrpc module. When this function is called, it fails to properly release the rxrpc_peer structure, resulting in a memory leak. An attacker could exploit this vulnerability by repeatedly invoking the function, causing the system to exhaust its available memory resources and potentially leading to a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.15.7 by commit bc97458620e38961af9505cc060ad4cf5c9e4af7. However, it was introduced in version v5.10 by commit 245500d853e9f20036cec7df4f6984ece4c6bf26.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can mitigate the risk of exploitation by disabling or restricting access to the rxrpc module. This can be achieved by modifying the system's configuration files or using kernel module blacklisting techniques. However, it is important to note that workarounds may have limitations and should not be considered a permanent solution. It is strongly advised to apply the official fix by updating the Kernel to the patched version.
Conclusion
The vulnerability in the Kernel's rxrpc module can result in a rxrpc_peer leak, potentially leading to resource exhaustion and denial-of-service attacks. It is crucial to update the Kernel to version v5.15.7 or later to mitigate this vulnerability. Users can also apply temporary workarounds by disabling or restricting access to the rxrpc module. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces with hardware devices.
The rxrpc module is a part of the Kernel responsible for handling the Reliable Datagram Protocol (RxRPC) network protocol.
The vulnerability can lead to resource exhaustion and potential denial-of-service attacks.
Yes, the vulnerability has been fixed in Linux Kernel version v5.15.7.
To update the Kernel, obtain the latest version from the official Linux Kernel repository and follow the installation instructions provided.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
