Incorrect Structure Access in Marvell Prestera
Summary
GSD-2021-1002823: net: marvell: prestera: fix incorrect structure access. Affects Kernel versions >= 3d5048cc54bd250cfbb358c37fcc011135977887, < 5c553a0cd1263e4da5f220d80fa713fc3959c1d0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Marvell Prestera is a network switch ASIC that is commonly used in networking devices. It provides various features and functionalities for network communication. However, a vulnerability has been discovered in the Marvell Prestera driver in the Linux Kernel. This vulnerability allows for incorrect structure access, which could potentially lead to security issues.
Vulnerability Detail
The vulnerability arises from a flaw in the Marvell Prestera driver in the Linux Kernel. It occurs when accessing certain structures within the driver, leading to incorrect data manipulation or potential memory corruption. An attacker could potentially exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability.
Conclusion
In conclusion, the Marvell Prestera driver in the Linux Kernel is vulnerable to incorrect structure access. This vulnerability could potentially lead to security issues, although the impact and attack plausibility have not yet been proven. It is recommended to update the Linux Kernel to version v5.15.12 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, it could potentially allow an attacker to execute arbitrary code, escalate privileges, or cause a denial-of-service condition.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
Yes, a patch is available in the Linux Kernel version v5.15.12. It can be obtained from the official Linux Kernel repository.
There are no known exploits for this vulnerability at the moment.
The vulnerability was discovered by an automated ID intended to aid in the discovery of potential security vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
