net/smc: Forward wakeup to smc socket waitqueue after fallback
Summary
GSD-2022-1000672: net/smc: Forward wakeup to smc socket waitqueue after fallback. Affects Kernel versions >= 2153bd1e3d3dbf6a3403572084ef6ed31c53c5f0, < 504078fbe9dd570d685361b57784a6050bc40aaa. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the core functionality for the Linux operating system. The net/smc module in the Linux Kernel is responsible for handling the SMC (System Management Controller) protocol, which is used for communication between systems in a cluster. The SMC protocol allows for high-speed, low-latency communication between systems. However, a vulnerability has been discovered in the net/smc module that could potentially be exploited by an attacker.
Vulnerability Detail
The vulnerability in the net/smc module allows an attacker to cause a denial-of-service (DoS) condition by triggering a race condition. This race condition occurs when a fallback mechanism is triggered in the net/smc module. The fallback mechanism is designed to handle situations where the primary communication channel is unavailable. However, due to a flaw in the implementation, the fallback mechanism can cause a race condition that leads to a DoS condition. An attacker can exploit this vulnerability by sending specially crafted network packets to a system running the vulnerable version of the Linux Kernel.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section to mitigate the risk of exploitation.
Conclusion
The net/smc module in the Linux Kernel is vulnerable to a race condition that can lead to a denial-of-service (DoS) condition. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.16.8 or later. No known workaround is available for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net/smc module is responsible for handling the SMC (System Management Controller) protocol in the Linux Kernel. It enables high-speed, low-latency communication between systems in a cluster.
This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition on a system running the vulnerable version of the Linux Kernel.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
No, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the fixed version mentioned in the 'how_to_fix' section.
You can find more information about this vulnerability in the GSD-2022-1000672 JSON file available on the GitHub repository of the Cloud Security Alliance's GSD Database (https://github.com/cloudsecurityalliance/gsd-database).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
