UAF Vulnerability in ipmi_si and ipmi_msghandler modules of Kernel
Summary
GSD-2021-1002804: ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module. Affects Kernel versions >= b2cfd8ab4add53c2070367bfee2f5b738f51698d, < 6809da5185141e61401da5b01896b79a4deed1ad. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The ipmi_si and ipmi_msghandler modules are part of the Kernel's IPMI (Intelligent Platform Management Interface) subsystem, which enables remote management and monitoring of hardware components. These modules handle IPMI messages and provide the necessary functionality for IPMI communication.
Vulnerability Detail
The identified vulnerability in the ipmi_si and ipmi_msghandler modules of the Kernel is a UAF (Use-After-Free) vulnerability. When these modules are uninstalled, there is a potential for a UAF condition to occur. A UAF vulnerability arises when a program continues to use a memory object after it has been freed, leading to potential memory corruption and exploitation by an attacker. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition on the affected system. The vulnerability was introduced in Kernel version v4.15 and has been fixed in version v5.10.89 by commit 6809da5185141e61401da5b01896b79a4deed1ad.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Kernel to version v5.10.89 or later. This can be done by following the official update process provided by the Linux distribution or by manually compiling and installing the updated Kernel source code. It is important to ensure that the updated Kernel version is compatible with the specific Linux distribution and hardware configuration.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a possible workaround is to disable or remove the ipmi_si and ipmi_msghandler modules from the Kernel configuration. This can be achieved by modifying the Kernel configuration file and rebuilding the Kernel without these modules. However, this workaround may result in the loss of IPMI functionality, so it should be carefully evaluated before implementation.
Conclusion
The UAF vulnerability in the ipmi_si and ipmi_msghandler modules of the Kernel can pose a significant security risk if left unaddressed. It is crucial to update the Kernel to the fixed version or apply the recommended workaround to mitigate the vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition on the affected system.
You can use vulnerability monitoring tools like Vulert to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Yes, the vulnerability has been fixed in Kernel version v5.10.89 by commit 6809da5185141e61401da5b01896b79a4deed1ad.
Yes, if updating the Kernel is not immediately feasible, you can disable or remove the ipmi_si and ipmi_msghandler modules from the Kernel configuration as a temporary workaround. However, this may result in the loss of IPMI functionality.
You can refer to the vulnerability database entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002804.json for more details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.