UAF Vulnerability in ipmi_si and ipmi_msghandler Modules in Linux Kernel
Summary
GSD-2021-1002785: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module. Affects Kernel versions >= b2cfd8ab4add53c2070367bfee2f5b738f51698d, < 925229d552724e1bba1abf01d3a0b1318539b012. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionalities. The ipmi_si and ipmi_msghandler modules are part of the kernel's IPMI (Intelligent Platform Management Interface) subsystem, which enables remote management and monitoring of computer systems. These modules handle communication with IPMI devices and process IPMI messages.
The vulnerability in question involves a use-after-free (UAF) issue that occurs when uninstalling the ipmi_si and ipmi_msghandler modules. A use-after-free vulnerability arises when a program continues to use a memory region after it has been freed, leading to potential memory corruption and the possibility of arbitrary code execution.
Vulnerability Detail
The UAF vulnerability in the ipmi_si and ipmi_msghandler modules can be triggered during the uninstallation process. If an attacker can exploit this vulnerability, they may be able to execute arbitrary code or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
The vulnerability was introduced in Linux Kernel version v4.15 by commit b2cfd8ab4add53c2070367bfee2f5b738f51698d and was fixed in version v4.19.223 by commit 925229d552724e1bba1abf01d3a0b1318539b012.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The UAF vulnerability in the ipmi_si and ipmi_msghandler modules of the Linux Kernel can potentially lead to arbitrary code execution or a denial-of-service condition. It is crucial to update the kernel to version v4.19.223 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, a patch for this vulnerability is available in Linux Kernel version v4.19.223 and later. It is recommended to update to the latest kernel version to mitigate the risk.
Unfortunately, no specific mitigations are mentioned for this vulnerability. It is advisable to update to the latest kernel version as soon as possible.
You can find more information about this vulnerability in the GSD-2021-1002785 entry of the GSD database maintained by the Cloud Security Alliance. The source link is provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
