Memory Leak in net: bridge: vlan
Summary
GSD-2022-1000203: net: bridge: vlan: fix memory leak in __allowed_ingress. Affects Kernel versions >= a580c76d534c7360ba68042b19cb255e8420e987, < 446ff1fc37c74093e81db40811a07b5a19f1d797. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: bridge: vlan package is a component of the Linux Kernel that handles VLAN tagging and filtering for network bridges. It allows for the creation of virtual LANs (VLANs) and the enforcement of ingress filtering rules. This package is an integral part of the Linux networking stack and is widely used in various network configurations.
Vulnerability Detail
The vulnerability in net: bridge: vlan is a memory leak issue that occurs in the __allowed_ingress function. This function is responsible for checking if a packet is allowed to enter a VLAN. However, due to a programming error, memory allocated for the VLAN ingress is not properly freed, leading to a memory leak. An attacker could potentially exploit this vulnerability by sending a large number of specially crafted packets, causing the system to exhaust its memory resources and potentially leading to a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
The memory leak vulnerability in net: bridge: vlan can be mitigated by updating the Linux Kernel to version v5.10.96 or later. It is crucial to apply this fix to prevent potential denial-of-service (DoS) attacks. For further assistance or information on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Net: bridge: vlan is a component of the Linux Kernel that handles VLAN tagging and filtering for network bridges.
This vulnerability can lead to a memory leak, potentially causing a denial-of-service (DoS) condition if exploited.
To fix this vulnerability, update the Linux Kernel to version v5.10.96 or later.
No, there is no known workaround for this vulnerability.
For more information, refer to the vulnerability details in the Open Source Vulnerability format or contact info@devnack.com for further support.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
