Vulnerability in Kernel package: hamradio: defer ax25 kfree after unregister_netdev
Summary
GSD-2021-1002814: hamradio: defer ax25 kfree after unregister_netdev. Affects Kernel versions < 450121075a6a6f1d50f97225d3396315309d61a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The hamradio module within the Kernel package is responsible for handling Amateur Radio protocols. It allows communication between Amateur Radio operators using AX.25 protocol. However, a vulnerability has been discovered in the hamradio module, specifically in the handling of ax25 kfree after unregister_netdev.
Vulnerability Detail
The vulnerability in the hamradio module arises from a failure to properly handle memory deallocation after unregistering the network device. This can lead to a use-after-free condition, where an attacker could potentially exploit the freed memory to execute arbitrary code or cause a denial-of-service. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.10.89 by commit 450121075a6a6f1d50f97225d3396315309d61a1.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Kernel package to version v5.10.89 or later. This can be done by obtaining the updated package from the official Linux Kernel repository and following the installation instructions provided. Alternatively, users can rely on package managers or system update mechanisms to automatically install the latest version of the Kernel package.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The hamradio module in the Kernel package is vulnerable to a use-after-free condition due to improper memory deallocation. It is crucial to update the Kernel package to version v5.10.89 or later to mitigate this vulnerability. No specific workaround has been mentioned. If you have any further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is currently unknown. It is important to apply the fix as soon as possible to mitigate any potential risks.
The remote exploitability of this vulnerability has not been determined yet. However, it is always recommended to keep software up to date to minimize the risk of remote attacks.
There are no known instances of this vulnerability being exploited in the wild at the moment. However, it is crucial to apply the fix to prevent any potential exploitation.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities, including this one.
For more details about this vulnerability, you can refer to the source link provided in the Open Source Vulnerability format or reach out to info@devnack.com for further support.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.