Use After Free Vulnerability in scsi: mpt3sas Package
Summary
GSD-2022-1001009: scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove(). Affects Kernel versions >= 7d310f241001e090cf1ec0f3ae836b38d8c6ebec, < 1bb8a7fc64d63ec818e367e1b37676ea2ef2d20c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The scsi: mpt3sas package is a SCSI host bus adapter driver for SAS/SATA RAID controllers based on the LSI Fusion MPT (Message Passing Technology) protocol. It provides support for managing and communicating with storage devices connected to these controllers. The vulnerability in this package allows for a use after free scenario, where a pointer to a freed memory location is still accessed, leading to potential security issues.
Vulnerability Detail
The use after free vulnerability in the _scsih_expander_node_remove() function of the scsi: mpt3sas package allows an attacker to exploit a freed memory location. By manipulating certain parameters, an attacker can trigger the use of this freed memory, potentially leading to a crash or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.17.3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to update the package to the fixed version.
Conclusion
The use after free vulnerability in the scsi: mpt3sas package can be mitigated by updating to the fixed version. It is recommended to update to Linux Kernel version v5.17.3 or any subsequent version that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The scsi: mpt3sas package is a SCSI host bus adapter driver for SAS/SATA RAID controllers based on the LSI Fusion MPT protocol. It provides support for managing and communicating with storage devices connected to these controllers.
A use after free vulnerability occurs when a program continues to use a pointer to a memory location that has been freed. This can lead to crashes, memory corruption, or even arbitrary code execution.
An attacker can exploit this vulnerability by manipulating certain parameters to trigger the use of a freed memory location. This can potentially lead to a crash or arbitrary code execution.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the scsi: mpt3sas package to the latest version available, which includes the fix for this issue. The fix was implemented in Linux Kernel version v5.17.3.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
