Vulnerability in Linux Kernel: hv: vmbus: Fix initialization of device object in vmbus_device_register()
Summary
GSD-2022-1001028: Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register(). Affects Kernel versions >= 743b237c3a7b0f5b44aa704aae8a1058877b6322, < 2fe4b8631427618175a32f125062df91a5fe3f73. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for numerous Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The vmbus driver in the Kernel is responsible for facilitating communication between the host and virtual machines. This vulnerability specifically affects the initialization of device objects in the vmbus_device_register() function.
Vulnerability Detail
The vulnerability arises from an incorrect initialization of device objects in the vmbus_device_register() function within the vmbus driver of the Linux Kernel. This flaw could potentially be exploited by an attacker to execute arbitrary code or trigger a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been addressed in the Linux Kernel version v5.17.3 through commit 2fe4b8631427618175a32f125062df91a5fe3f73. The vulnerability was introduced in version v5.17 by commit 743b237c3a7b0f5b44aa704aae8a1058877b6322.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the Linux Kernel is affected by a vulnerability in the vmbus driver's vmbus_device_register() function. This flaw could potentially allow an attacker to execute arbitrary code or trigger a denial-of-service condition. It is crucial to update the Linux Kernel to version v5.17.3 or later to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will provide real-time monitoring and alerts for open-source vulnerabilities.
At the time of this report, no known exploits for this vulnerability have been disclosed.
Yes, a patch has been released in the Linux Kernel version v5.17.3. It is recommended to update to this version or a later one to mitigate the vulnerability.
No, updating the Linux Kernel to the fixed version is the recommended approach to mitigate this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
