Double Free Vulnerability in tun
Summary
GSD-2021-1002847: tun: avoid double free in tun_free_netdev. Affects Kernel versions < 3cb5ae77799e8ed6ec3fec0b6b4cd07f01650cc5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tun package is a kernel module in the Linux ecosystem that provides a virtual network device interface. It allows user-space programs to interact with network traffic at the device driver level. The tun module is commonly used in VPN software and network virtualization solutions. However, a vulnerability has been discovered in the tun module that could lead to a double free condition.
Vulnerability Detail
The double free vulnerability in tun, identified as GSD-2021-1002847, occurs when the tun_free_netdev function is called multiple times on the same network device. This can be exploited by an attacker to cause a denial-of-service (DoS) condition or potentially execute arbitrary code. The vulnerability has been fixed in Linux Kernel version v5.15.12 by commit 3cb5ae77799e8ed6ec3fec0b6b4cd07f01650cc5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the fix by updating the Linux Kernel to a patched version.
Conclusion
The double free vulnerability in the tun module of the Linux Kernel can lead to a denial-of-service (DoS) condition or potential code execution. It is crucial to update the Linux Kernel to version v5.15.12 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a denial-of-service (DoS) condition or potentially allow an attacker to execute arbitrary code.
If your system does not have the tun module loaded or if it is not being used by any software, it is not directly affected by this vulnerability. However, it is still recommended to update the Linux Kernel to ensure overall system security.
Yes, this vulnerability can be exploited remotely if an attacker can send malicious network traffic to a system with the vulnerable tun module. It is important to update the kernel to prevent potential remote exploitation.
There are no known instances of this vulnerability being actively exploited in the wild. However, it is advisable to apply the fix as soon as possible to mitigate any potential risks.
You can find more information about this vulnerability, including the fix commit and its impact, in the vulnerability report available at the following source: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002847.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
