net/packet: rx_owner_map depends on pg_vec
Summary
GSD-2021-1002655: net/packet: rx_owner_map depends on pg_vec. Affects Kernel versions >= 6fb0e4385928900ccb8697748555b3f54bba5193, < 18c73170de6719491f79b04c727ea8314c246b03. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The net/packet package is a part of the Linux Kernel ecosystem. It provides functionality for packet socket creation and management. Packet sockets allow direct access to network devices, enabling the implementation of custom network protocols or packet processing. The rx_owner_map feature within this package is responsible for mapping received packets to their corresponding socket owners. However, this feature has a vulnerability that depends on pg_vec.
Vulnerability Detail
The vulnerability in net/packet's rx_owner_map feature can have security implications. Although the exact impact and attack plausibility have not been proven, it is crucial to address this issue. The vulnerability was introduced in Linux Kernel version v4.19.114 and fixed in v4.19.222. Further technical details can be found in the references link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The net/packet vulnerability in the rx_owner_map feature can have security implications. It is recommended to update the Linux Kernel to version v4.19.222 or later to address this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
net/packet is a package in the Linux Kernel that provides functionality for packet socket creation and management. It allows direct access to network devices for implementing custom network protocols or packet processing.
The rx_owner_map feature in net/packet is responsible for mapping received packets to their corresponding socket owners.
The vulnerability in rx_owner_map depends on pg_vec. Its exact impact and attack plausibility have not been proven, but it is important to address this issue to ensure the security of the system.
The vulnerability was introduced in Linux Kernel version v4.19.114 and fixed in v4.19.222.
More technical details about this vulnerability can be found in the references link provided.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
