net: Do Not Keep the DST Cache When Uncloning an SKB DST and Its Metadata
Summary
GSD-2022-1000339: net: do not keep the dst cache when uncloning an skb dst and its metadata. Affects Kernel versions >= d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < 0b6087c6358656dd39dc714233d5183abc9c47a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources, including networking. The networking subsystem of the kernel handles the transmission and reception of network packets. One important component of the networking subsystem is the destination (dst) cache, which stores information about the next hop for outgoing packets. This cache helps improve network performance by avoiding repeated route lookups for packets with the same destination. However, a vulnerability has been discovered in the handling of the dst cache when uncloning a socket buffer (skb) dst and its metadata.
Vulnerability Detail
The vulnerability arises when uncloning an skb dst and its metadata. Uncloning refers to the process of duplicating an skb and its associated data structures. When uncloning an skb dst, the kernel should not retain the dst cache entry, as it may lead to incorrect routing decisions. This vulnerability can potentially be exploited by an attacker to manipulate network traffic and redirect it to unintended destinations. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to apply the fix by updating their Linux Kernel to the recommended version.
Conclusion
The vulnerability in the Linux Kernel's handling of the dst cache when uncloning an skb dst and its metadata has been identified and fixed in version v5.4.180. Users are advised to update their kernel to the recommended version to ensure the security of their systems. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is an open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources, including networking.
The dst cache is a component of the networking subsystem in the Linux Kernel. It stores information about the next hop for outgoing packets, helping to improve network performance by avoiding repeated route lookups.
Uncloning refers to the process of duplicating a socket buffer (skb) and its associated data structures. It is used in various networking operations within the kernel.
The impact of this vulnerability is not yet proven. However, if exploited, it could allow an attacker to manipulate network traffic and redirect it to unintended destinations.
To fix this vulnerability, users should update their Linux Kernel to version v5.4.180 or later, which includes the necessary fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
