Vulnerability in Kernel: scsi: qedf: Fix refcount issue when LOGO is received during TMF
Summary
GSD-2022-1000496: scsi: qedf: Fix refcount issue when LOGO is received during TMF. Affects Kernel versions < 7fcbed38503bb34c6e6538b6a9482d1c6bead1e8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The scsi (Small Computer System Interface) subsystem within the Kernel handles communication with SCSI devices, such as storage devices. The qedf driver is responsible for supporting the QLogic Enhanced Disk Format (QEDF) protocol for Fibre Channel storage devices. This vulnerability specifically affects the qedf driver when handling a LOGO (Logout) message during a TMF (Task Management Function) operation.
Vulnerability Detail
The vulnerability in the qedf driver arises from a refcount issue when a LOGO message is received during a TMF operation. A refcount (reference count) is a mechanism used to track the number of references to a particular resource or object. In this case, the refcount is not properly managed, leading to a potential use-after-free scenario. An attacker could exploit this vulnerability by sending a specially crafted LOGO message during a TMF operation, causing the driver to incorrectly handle memory resources. This could result in a system crash (denial of service) or potentially allow the attacker to execute arbitrary code with kernel privileges, leading to a complete compromise of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider disabling the qedf driver if it is not essential for their system's functionality. However, this may impact the availability of Fibre Channel storage devices using the QEDF protocol. Disabling the driver can be achieved by blacklisting the qedf module or removing it from the Kernel configuration. It is recommended to consult the documentation or support resources of the specific Linux distribution for guidance on how to perform these actions.
Conclusion
In conclusion, the Kernel vulnerability in the qedf driver when handling a LOGO message during a TMF operation can lead to a system crash or potential code execution with kernel privileges. It is crucial to update the Linux Kernel to version v5.16.10 or later to mitigate this vulnerability. Alternatively, users can consider disabling the qedf driver if it is not essential for their system's functionality. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system crash (denial of service) or allow an attacker to execute arbitrary code with kernel privileges, potentially compromising the entire system.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation. Simply upload your package-lock.json manifest file to the Vulert Playground to perform the check.
Yes, a patch is available in the Linux Kernel version v5.16.10. It is recommended to update to this version or a later one to fix the vulnerability.
A workaround is available by disabling the qedf driver if it is not necessary for your system. However, this may impact the functionality of Fibre Channel storage devices using the QEDF protocol.
You can find more information about this vulnerability in the GSD-2022-1000496.json file available in the GSD database repository: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000496.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
