UAF Issue in psi Trigger in Linux Kernel
Summary
GSD-2022-1000246: psi: Fix uaf issue when psi trigger is destroyed while being polled. Affects Kernel versions >= 0e94682b73bfa6c44c98af7a26771c9c08c055d5, < d3e4c61e143e69671803ef3f52140cf7a7258ee7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware. The psi trigger is a feature in the kernel that allows monitoring of system pressure metrics. It provides information about CPU, memory, and IO pressure, helping to identify resource bottlenecks. However, a use-after-free (UAF) vulnerability has been discovered in the psi trigger when it is destroyed while being polled.
Vulnerability Detail
The UAF vulnerability in the psi trigger occurs when the trigger is destroyed while it is being polled. This can lead to a situation where the kernel accesses memory that has already been freed, potentially resulting in a crash or arbitrary code execution. The vulnerability was introduced in version v5.2 of the Linux Kernel and has been fixed in version v5.15.19. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.19 or later. This fix can be obtained by pulling the latest changes from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The UAF issue in the psi trigger of the Linux Kernel can be fixed by updating to version v5.15.19 or later. It is important to keep the Linux Kernel up to date to ensure the security and stability of the system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The psi trigger is a feature in the Linux Kernel that provides information about system pressure metrics, such as CPU, memory, and IO pressure. It helps in identifying resource bottlenecks.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the program.
You can use the Vulert Playground at Vulert Scanner to check if your Linux Kernel version is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
The UAF vulnerability in the psi trigger could potentially lead to a crash or arbitrary code execution in the Linux Kernel. This could be exploited by an attacker to gain unauthorized access or disrupt the system.
As of now, there is no known exploit for this vulnerability. However, it is always recommended to apply security patches and updates to mitigate the risk of potential exploits.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.