Vulnerability in Linux Kernel: fs/mount_setattr
Summary
GSD-2022-1000060: fs/mount_setattr: always cleanup mount_kattr. Affects Kernel versions >= 9caccd41541a6f7d6279928d9f971f6642c361af, < 47b5d0a7532d39e42a938f81e3904268145c341d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a critical component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and file system handling. The fs/mount_setattr vulnerability affects the Linux Kernel, specifically the mount_setattr function, which is responsible for handling attribute changes to mounted file systems.
Vulnerability Detail
The fs/mount_setattr vulnerability in the Linux Kernel allows an attacker to exploit a flaw in the mount_kattr structure cleanup process. This flaw can potentially lead to privilege escalation or denial of service attacks. By manipulating certain attributes of a mounted file system, an attacker can trigger a use-after-free condition, resulting in the execution of arbitrary code or a system crash. This vulnerability was introduced in Linux Kernel version 5.12 and has been fixed in version 5.15.13.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version 5.15.13 or later. This can be done by downloading the latest kernel source code from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the system's specifications. Alternatively, users can wait for their Linux distribution to release an updated package containing the patched version of the Kernel.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected functionality by preventing untrusted users from mounting file systems. This can be achieved by modifying the system's configuration files or by applying appropriate access control measures. However, it is strongly recommended to apply the official fix as soon as possible to ensure complete mitigation of the vulnerability.
Conclusion
The fs/mount_setattr vulnerability in the Linux Kernel poses a potential risk of privilege escalation and denial of service attacks. It is crucial to update the Kernel to version 5.15.13 or later to mitigate this vulnerability. Users can also use the Vulert Playground to check if their system is affected. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The fs/mount_setattr vulnerability can potentially allow an attacker to gain elevated privileges or cause a denial of service by exploiting a use-after-free condition in the Linux Kernel's mount_setattr function.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze the dependencies and alert you if any known vulnerabilities are present.
At the time of this report, there are no known public exploits targeting the fs/mount_setattr vulnerability. However, it is crucial to apply the fix promptly to prevent potential exploitation.
No, this vulnerability requires local access to the system to exploit. However, it is still important to address the issue to prevent potential privilege escalation or denial of service attacks.
The primary mitigation for this vulnerability is to update the Linux Kernel to the patched version. Applying access control measures to restrict untrusted users from mounting file systems can serve as a temporary workaround until the official fix is applied.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.