devlink: Fix netns refcount leak in devlink_nl_cmd_reload()
Summary
GSD-2021-1002592: devlink: fix netns refcount leak in devlink_nl_cmd_reload(). Affects Kernel versions >= ccdf07219da6bd1f43c6ddcde4c0e36993c7365a, < fe30b70ca84da9c4aca85c03ad86e7a9b89c5ded. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The devlink package is a part of the Linux Kernel ecosystem. It provides a framework for configuring and managing device drivers and network devices. The devlink_nl_cmd_reload() function is responsible for reloading the devlink configuration. However, a vulnerability has been discovered in this function that leads to a netns refcount leak.
Vulnerability Detail
The vulnerability in devlink_nl_cmd_reload() results in a netns refcount leak. This means that when the function is called, it fails to properly release the reference count on the network namespace (netns) object. As a result, the netns object remains in memory even after it is no longer needed, leading to a resource leak. An attacker could potentially exploit this vulnerability to exhaust system resources and cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The devlink package in the Linux Kernel is vulnerable to a netns refcount leak in the devlink_nl_cmd_reload() function. This vulnerability can be mitigated by updating to the latest version of the Linux Kernel (v5.15.8 or later). For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Devlink is a framework in the Linux Kernel for configuring and managing device drivers and network devices.
A netns refcount leak refers to a situation where the reference count on a network namespace object is not properly released, leading to a resource leak.
The vulnerability can be exploited by an attacker to exhaust system resources and cause a denial-of-service (DoS) condition.
To fix this vulnerability, it is recommended to update to the latest version of the Linux Kernel (v5.15.8 or later) that includes the patch for this issue.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
