Use-after-free vulnerability in net: sched: fix tc_new_tfilter()
Summary
GSD-2022-1000275: net: sched: fix use-after-free in tc_new_tfilter(). Affects Kernel versions >= 470502de5bdb1ed0def643a4458593a40b8f6b66, < f36cacd6c933183c1a8827d5987cf2cfc0a44c76. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services for the computer's hardware and software. The 'net' subsystem in the Linux Kernel handles network-related functionalities, including traffic control (tc) for managing network traffic. The 'sched' component within the 'net' subsystem is responsible for scheduling and prioritizing network traffic. However, a use-after-free vulnerability has been identified in the 'tc_new_tfilter()' function of the 'sched' component.
Vulnerability Detail
The use-after-free vulnerability in 'tc_new_tfilter()' allows an attacker to manipulate memory after it has been freed, potentially leading to a variety of security issues. By exploiting this vulnerability, an attacker could execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The vulnerability was introduced in Linux Kernel version 5.1 and has been fixed in version 5.15.20.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version 5.15.20 or later. This can be done by downloading the latest kernel source code from the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the provided instructions.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected functionality by unloading the 'sch_netem' kernel module. This can be achieved by running the following command as root:
modprobe -r sch_netem
Conclusion
The use-after-free vulnerability in the 'tc_new_tfilter()' function of the 'sched' component in the Linux Kernel can have severe security implications. It is crucial to update the Linux Kernel to version 5.15.20 or later to mitigate this vulnerability. In the meantime, users can apply the provided workaround to temporarily disable the affected functionality. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed, leading to potential memory corruption and security issues.
By carefully manipulating the freed memory region, an attacker can execute arbitrary code, escalate privileges, or cause a denial-of-service condition.
The vulnerability was introduced in Linux Kernel version 5.1 and affects all versions up to and including 5.15.19.
Yes, the vulnerability has been fixed in Linux Kernel version 5.15.20.
Yes, users can temporarily disable the affected functionality by unloading the 'sch_netem' kernel module.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.