Use-after-free vulnerability in net: sched: fix tc_new_tfilter()
Summary
GSD-2022-1000211: net: sched: fix use-after-free in tc_new_tfilter(). Affects Kernel versions >= 470502de5bdb1ed0def643a4458593a40b8f6b66, < e7be56926397cf9d992be8913f74a76152f8f08d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources and facilitating communication between hardware and software components. The 'net' subsystem within the kernel is responsible for network-related operations, including traffic control (tc). The 'sched' component within the 'net' subsystem handles packet scheduling and filtering. This vulnerability specifically affects the 'tc_new_tfilter()' function within the 'sched' component.
Vulnerability Detail
The 'tc_new_tfilter()' function in the 'sched' component of the Linux Kernel suffers from a use-after-free vulnerability. This vulnerability was introduced in version v5.1 of the kernel and was fixed in version v5.10.97. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability occurs when the function fails to properly handle a specific sequence of operations, leading to a use-after-free condition. This can result in the execution of unintended code or the corruption of critical data structures.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected functionality by unloading the 'sch_netem' kernel module. This can be achieved by running the following command as root:
modprobe -r sch_netem
However, it is strongly advised to apply the official fix by updating the kernel as soon as possible.
Conclusion
The use-after-free vulnerability in the 'tc_new_tfilter()' function of the Linux Kernel's 'sched' component poses a significant risk to the security and stability of affected systems. It is crucial to update the kernel to version v5.10.97 or later to address this vulnerability. In the meantime, users can apply a temporary workaround by disabling the 'sch_netem' kernel module. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. It poses a significant risk to the security and stability of affected systems.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if the vulnerability is present.
There are currently no known instances of this vulnerability being exploited in the wild. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely if the affected system is accessible over a network. Attackers can potentially exploit this vulnerability by sending specially crafted network packets.
For more technical details and information about this vulnerability, you can refer to the official Linux Kernel repository and the associated commit history.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
