Use-after-free vulnerability in net: sched: fix tc_new_tfilter()
Summary
GSD-2022-1000645: net: sched: fix use-after-free in tc_new_tfilter(). Affects Kernel versions >= 470502de5bdb1ed0def643a4458593a40b8f6b66, < 95e34f61b58a152656cbe8d6e19843cc343fb089. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services to enable the execution of software on a computer. The 'net' subsystem in the Linux Kernel is responsible for handling network-related operations. Within the 'net' subsystem, the 'sched' module is responsible for managing network traffic scheduling and shaping. The 'tc_new_tfilter()' function is a part of the 'sched' module and is used to create a new traffic filter. However, a use-after-free vulnerability has been discovered in this function.
Vulnerability Detail
The use-after-free vulnerability in 'tc_new_tfilter()' function allows an attacker to manipulate memory after it has been freed, leading to potential memory corruption or arbitrary code execution. This vulnerability can be exploited by an attacker with local access to the system. By carefully crafting a malicious request, the attacker can trigger the use-after-free condition and potentially execute arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
The use-after-free vulnerability in the 'tc_new_tfilter()' function of the Linux Kernel's 'net' subsystem has the potential to allow arbitrary code execution. It is crucial to update the Linux Kernel to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to memory corruption or arbitrary code execution.
An attacker with local access to the system can craft a malicious request to trigger the use-after-free condition in the 'tc_new_tfilter()' function, potentially leading to arbitrary code execution.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could result in memory corruption or arbitrary code execution with elevated privileges.
Yes, this vulnerability has been fixed in Linux Kernel version v5.16.6.
To fix this vulnerability, it is recommended to update the Linux Kernel to the latest version available. This can be done by downloading the updated kernel source code from the official Linux Kernel repository and compiling it according to the provided instructions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
