net: amd-xgbe: Fix skb data length underflow in Kernel
Summary
GSD-2022-1000210: net: amd-xgbe: Fix skb data length underflow. Affects Kernel versions >= 622c36f143fc9566ba49d7cec994c2da1182d9e2, < 4d3fcfe8464838b3920bc2b939d888e0b792934e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures the stability and security of the system. The vulnerability in the amd-xgbe module of the Kernel can lead to a data length underflow in skb (socket buffer) objects. This can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code with elevated privileges.
Vulnerability Detail
The vulnerability arises due to a data length underflow in skb objects within the amd-xgbe module of the Kernel. This can occur when processing network packets, leading to memory corruption or out-of-bounds access. An attacker could exploit this vulnerability by sending specially crafted network packets to a vulnerable system, potentially resulting in a DoS condition or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix by updating the Kernel to the latest version.
Conclusion
The vulnerability in the amd-xgbe module of the Kernel can lead to a data length underflow in skb objects, potentially resulting in a DoS condition or arbitrary code execution. It is crucial to update the Kernel to version v5.10.97 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a denial-of-service condition to arbitrary code execution with elevated privileges.
An attacker can exploit this vulnerability by sending specially crafted network packets to a vulnerable system, triggering the data length underflow and potentially causing a DoS condition or executing arbitrary code.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
No specific workaround has been provided. It is recommended to update the Kernel to the latest version to apply the fix.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
