net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
Summary
GSD-2022-1000980: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib(). Affects Kernel versions >= af5f60c7e3d593c2fa31b9a62c16eae75f074de3, < 22025513ced3d599ee8b24169141c95cf2467a4a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/smc package is a part of the Linux Kernel ecosystem. It provides support for the SMC (System Management Controller) protocol, which enables communication between systems in a cluster. The smc_pnet_find_ib() function is responsible for finding the InfiniBand (IB) device associated with a given SMC PNET ID. However, a vulnerability in this function can lead to a NULL pointer dereference.
Vulnerability Detail
The vulnerability in smc_pnet_find_ib() arises from a NULL pointer dereference. If the function is called with an invalid PNET ID, it fails to handle the error condition properly, resulting in a NULL pointer dereference. An attacker could exploit this vulnerability by providing a malicious PNET ID, leading to a kernel crash or potential privilege escalation. The vulnerability was introduced in Linux Kernel version v5.1 and has been fixed in version v5.17.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The net/smc package in the Linux Kernel is vulnerable to a NULL pointer dereference in the smc_pnet_find_ib() function. This vulnerability can be exploited to cause a kernel crash or potentially escalate privileges. Users should update their Linux Kernel to version v5.17.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a NULL pointer dereference, resulting in a kernel crash or potential privilege escalation.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if the vulnerability is detected.
There is no known exploit for this vulnerability at this time.
Yes, an attacker can remotely exploit this vulnerability by providing a malicious PNET ID.
Yes, this vulnerability has been fixed in Linux Kernel version v5.17.4.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
