Vulnerability in Kernel: scsi: pm8001: Fix task leak in pm8001_send_abort_all()
Summary
GSD-2022-1001056: scsi: pm8001: Fix task leak in pm8001_send_abort_all(). Affects Kernel versions < 34c79d16ee69cb53288c202bb1ab0ba0130d9674. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and acts as an interface between the hardware and software layers. It is responsible for managing system resources, including memory, processes, and device drivers. The scsi subsystem in the Kernel handles communication with SCSI (Small Computer System Interface) devices, such as hard drives and tape drives. One of the drivers in the scsi subsystem is pm8001, which is used for SAS (Serial Attached SCSI) host bus adapters.
The pm8001_send_abort_all() function in the pm8001 driver is responsible for sending abort commands to all active tasks on the SAS host bus adapter. However, there is a task leak vulnerability in this function, which can result in resource exhaustion and potential denial-of-service attacks. An attacker could exploit this vulnerability by sending specially crafted requests to the affected system, causing it to exhaust its resources and become unresponsive.
Vulnerability Detail
The vulnerability in the pm8001_send_abort_all() function of the pm8001 driver allows an attacker to trigger a resource leak, leading to potential denial-of-service attacks. By sending specially crafted requests to the affected system, an attacker can exhaust system resources, causing the system to become unresponsive. This vulnerability has the potential to disrupt critical services and impact the availability of the affected system.
The vulnerability has been assigned the ID GSD-2022-1001056 and is fixed in Linux Kernel version v5.17.3 by commit 34c79d16ee69cb53288c202bb1ab0ba0130d9674.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to mitigate the risk of exploitation.
Conclusion
In conclusion, the Kernel's scsi subsystem, specifically the pm8001 driver, is vulnerable to a task leak issue in the pm8001_send_abort_all() function. This vulnerability can be exploited to exhaust system resources and potentially cause denial-of-service attacks. It is crucial to update the Linux Kernel to version v5.17.3 or later to fix this vulnerability. No known workarounds are available, and it is recommended to apply the patch as soon as possible to mitigate the risk of exploitation.
For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to resource exhaustion and potential denial-of-service attacks. An attacker can exploit this vulnerability to exhaust system resources, causing the affected system to become unresponsive.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities, including this one.
Yes, a patch is available in Linux Kernel version v5.17.3. It is recommended to update the Kernel to this version or later to fix the vulnerability.
There are no known public exploits for this vulnerability at the time of writing. However, it is crucial to apply the fix as soon as possible to mitigate the risk of potential exploitation.
Yes, this vulnerability can be exploited remotely. An attacker can send specially crafted requests to the affected system to trigger the resource leak and cause a denial-of-service condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
