Vulnerability in sch_cake: Do Not Call cake_destroy() from cake_init()
Summary
GSD-2021-1002693: sch_cake: do not call cake_destroy() from cake_init(). Affects Kernel versions >= 046f6fd5daefac7f5abdafb436b30f63bc7c602b, < 20ad1ef02f9ad5e1dda9eeb113e4c158b4806986. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sch_cake package is a component of the Linux Kernel, which is responsible for managing network traffic shaping. It utilizes the Cake algorithm to prioritize and control the flow of packets. The cake_init() function is called during the initialization process to set up the necessary data structures and configurations. However, a vulnerability exists where the cake_destroy() function is mistakenly called from cake_init(). This can lead to unexpected behavior and potential security issues.
Vulnerability Detail
The vulnerability arises from the incorrect invocation of cake_destroy() within cake_init(). This can result in the premature destruction of critical resources and data structures, leading to potential memory corruption or use-after-free vulnerabilities. An attacker may be able to exploit this vulnerability to execute arbitrary code, escalate privileges, or cause denial-of-service conditions. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The sch_cake package in the Linux Kernel is vulnerable to a flaw where cake_destroy() is mistakenly called from cake_init(). This can result in memory corruption, arbitrary code execution, or other security issues. It is recommended to update to Linux Kernel version v5.10.88 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
sch_cake is a component of the Linux Kernel responsible for network traffic shaping using the Cake algorithm.
cake_init() is a function within sch_cake that is called during initialization to set up necessary configurations.
cake_destroy() is a function within sch_cake that is responsible for destroying resources and data structures.
This vulnerability can lead to memory corruption, use-after-free vulnerabilities, arbitrary code execution, privilege escalation, or denial-of-service conditions.
Yes, the vulnerability has been fixed in Linux Kernel version v5.10.88 and subsequent versions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
