Vulnerability in Linux Kernel: riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
Summary
GSD-2022-1000784: riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP. Affects Kernel versions >= 8ad8b72721d0f07fa02dbe71f901743f9c71c8e6, < 08b22e3f150e82b3334276348ec8d9f721501425. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for numerous Linux distributions. It provides essential functionality for managing system resources, device drivers, and security features. The riscv architecture is supported by the Linux Kernel, enabling it to run on RISC-V processors. This vulnerability specifically affects configurations with KASAN (Kernel Address Sanitizer), SPARSEMEM, and without SPARSE_VMEMMAP.
Vulnerability Detail
The vulnerability arises when the KASAN, SPARSEMEM, and !SPARSE_VMEMMAP configurations are combined. It was introduced in Linux Kernel version v5.6 by commit 8ad8b72721d0f07fa02dbe71f901743f9c71c8e6 and fixed in version v5.15.27 by commit 08b22e3f150e82b3334276348ec8d9f721501425. While the impact and attack plausibility have not been proven, this vulnerability has the potential to be exploited for malicious purposes. Further technical details and references can be found in the provided links.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, this vulnerability in the Linux Kernel affects configurations with KASAN, SPARSEMEM, and without SPARSE_VMEMMAP. While the impact and exploitability are yet to be proven, it is recommended to update to the fixed version of the Linux Kernel to mitigate any potential risks. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is currently unknown, as the actual attack scenario and consequences have not been demonstrated.
The remote exploitability of this vulnerability is yet to be determined.
There are no known instances of this vulnerability being exploited at the moment.
Yes, a patch has been released in Linux Kernel version v5.15.27 to address this vulnerability.
More information about this vulnerability can be found in the provided links and references.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
