Fix crash in error case in scsi: myrs
Summary
GSD-2022-1000335: scsi: myrs: Fix crash in error case. Affects Kernel versions < 5c5ceea00c8c9df150708e66cb9f2891192c1162. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The scsi: myrs package is a component of the Linux Kernel. It provides support for SCSI host bus adapters using the Myricom Myri-10G Ethernet adapter. The package allows for the management and communication with SCSI devices connected to the system. However, a vulnerability has been discovered in the package that can lead to a crash in certain error cases.
Vulnerability Detail
The vulnerability in scsi: myrs arises from a flaw in error handling. In specific error scenarios, the package fails to handle the situation correctly, resulting in a crash. This crash can potentially be exploited by an attacker to disrupt the system or cause a denial of service. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.4.180 by commit 5c5ceea00c8c9df150708e66cb9f2891192c1162.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The scsi: myrs package in the Linux Kernel is vulnerable to a crash in certain error cases. This vulnerability has been fixed in Linux Kernel version v5.4.180. It is crucial to update the kernel to the fixed version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
scsi: myrs is a component of the Linux Kernel that provides support for SCSI host bus adapters using the Myricom Myri-10G Ethernet adapter.
The impact of this vulnerability is not yet proven, but it has the potential to cause a crash in certain error cases, leading to a denial of service or system disruption.
Yes, this vulnerability has been fixed in Linux Kernel version v5.4.180 by commit 5c5ceea00c8c9df150708e66cb9f2891192c1162.
To fix this vulnerability, update the Linux Kernel to version v5.4.180 or later. Obtain the updated kernel source code from the official Linux Kernel repository and compile it for your system.
No workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
