Vulnerability in Kernel: scsi: qedf: Fix refcount issue when LOGO is received during TMF
Summary
GSD-2022-1000365: scsi: qedf: Fix refcount issue when LOGO is received during TMF. Affects Kernel versions < 87f187e5265bc8e3b38faef8b9db864cdd61dde7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services to enable the proper functioning of the system. The scsi (Small Computer System Interface) subsystem within the Kernel handles communication with SCSI devices, such as storage devices. The qedf driver is responsible for managing Fibre Channel over Ethernet (FCoE) connections. This vulnerability specifically affects the qedf driver when a LOGO (Logout) message is received during a Target Mode Function (TMF) operation.
Vulnerability Detail
The vulnerability arises from a reference counting issue in the qedf driver when a LOGO message is received during a TMF operation. This issue can lead to a use-after-free vulnerability, potentially allowing an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been assigned the ID GSD-2022-1000365 and is fixed in Linux Kernel version v5.10.101 by commit 87f187e5265bc8e3b38faef8b9db864cdd61dde7.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.101 or later. This can be done by obtaining the updated Kernel source code from the official Git repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it for the target system. Alternatively, users can wait for their Linux distribution to provide an updated Kernel package that includes the fix.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the qedf driver or remove the affected hardware from the system. However, these workarounds may result in the loss of functionality related to Fibre Channel over Ethernet (FCoE) connections.
Conclusion
The vulnerability in the Kernel's qedf driver can lead to a use-after-free vulnerability when a LOGO message is received during a TMF operation. It is crucial to update the Linux Kernel to version v5.10.101 or later to mitigate this vulnerability. Users can also utilize Vulert's playground (https://vulert.com/scanner) to check if their system is affected and receive real-time alerts for open-source vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities.
Yes, you can disable the qedf driver or remove the affected hardware from the system. However, these workarounds may result in the loss of functionality related to Fibre Channel over Ethernet (FCoE) connections.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.101 or later. Obtain the updated Kernel source code from the official Git repository and compile it for your system. Alternatively, wait for your Linux distribution to provide an updated Kernel package that includes the fix.
You can find more information about this vulnerability in the GSD database entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000365.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.