net/smc: Use a mutex for locking "struct smc_pnettable"
Summary
GSD-2022-1000857: net/smc: Use a mutex for locking "struct smc_pnettable". Affects Kernel versions >= 64e28b52c7a6616217bee67ba2ad886f478f9737, < 91f56a85278ebd6440ded1a6f82a9706cfcb0a7f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/smc package is a part of the Linux Kernel ecosystem. It provides support for the SMC (System Management Controller) protocol, which is used for communication between systems in a cluster. The 'struct smc_pnettable' is a data structure used by the net/smc package to manage the network table for SMC connections. This vulnerability arises from the lack of proper locking mechanisms for this data structure, which can lead to race conditions and potential security issues.
Vulnerability Detail
The vulnerability in the net/smc package arises from the absence of a mutex for locking the 'struct smc_pnettable' data structure. Without proper locking, concurrent access to this data structure can result in race conditions, leading to inconsistent or incorrect state. This can potentially be exploited by attackers to manipulate the network table and disrupt SMC connections, causing denial-of-service or other security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to apply the fix by updating to a version of the Linux Kernel that includes the necessary patch.
Conclusion
The net/smc package in the Linux Kernel is vulnerable to a race condition due to the absence of proper locking for the 'struct smc_pnettable' data structure. This can be fixed by updating to Linux Kernel version v5.10.103 or any subsequent version that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net/smc package is a part of the Linux Kernel ecosystem and provides support for the SMC (System Management Controller) protocol used for communication between systems in a cluster.
'struct smc_pnettable' is a data structure used by the net/smc package to manage the network table for SMC connections.
This vulnerability can lead to race conditions and potential security issues. Attackers may exploit this vulnerability to manipulate the network table and disrupt SMC connections, causing denial-of-service or other security breaches.
To fix this vulnerability, update to Linux Kernel version v5.10.103 or any subsequent version that includes the fix.
There is no specific workaround mentioned for this vulnerability. The recommended solution is to apply the fix by updating to a version of the Linux Kernel that includes the necessary patch.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
