Vulnerability in Linux Kernel: tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH
Summary
GSD-2022-1001065: tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. Affects Kernel versions < 20a0b7c3279ab6e5b2ea942d2d64855a6136d6a9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that forms the foundation of various Linux distributions. It provides essential functionality for the operating system, including managing system resources, device drivers, and network communication. The tcp module within the Linux Kernel is responsible for handling TCP/IP network connections.
One of the components in the tcp module, inet_listen_hashbucket::lock, is used to protect the hash bucket for listening sockets. However, there is a vulnerability where this lock is acquired with disabled BH (bottom half) context, which can lead to potential security issues.
Vulnerability Detail
The vulnerability arises when the inet_listen_hashbucket::lock is acquired with disabled BH. This can result in security risks, although the exact impact and attack plausibility have not been proven yet. The vulnerability has been identified and assigned the ID GSD-2022-1001065. It affects the Linux Kernel and has been fixed in version v5.17.3 by commit 20a0b7c3279ab6e5b2ea942d2d64855a6136d6a9.
To exploit this vulnerability, an attacker would need to have access to the affected system and be able to trigger the specific conditions that lead to the acquisition of inet_listen_hashbucket::lock with disabled BH. Successful exploitation could potentially allow the attacker to gain unauthorized access, manipulate network connections, or disrupt network communication.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the Linux Kernel, where the acquisition of inet_listen_hashbucket::lock with disabled BH can occur, poses potential security risks. It is crucial to update the Kernel to version v5.17.3 or later to mitigate this vulnerability. By applying the fix commit 20a0b7c3279ab6e5b2ea942d2d64855a6136d6a9, the vulnerable code is replaced, ensuring the proper acquisition of inet_listen_hashbucket::lock and reducing the risk of unauthorized access or network disruption.
For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is an open-source operating system kernel that forms the foundation of various Linux distributions. It provides essential functionality for the operating system, including managing system resources, device drivers, and network communication.
The tcp module in the Linux Kernel is responsible for handling TCP/IP network connections. It implements the TCP protocol, which is widely used for reliable and ordered delivery of data over IP networks.
The inet_listen_hashbucket::lock is used to protect the hash bucket for listening sockets in the tcp module of the Linux Kernel. It ensures that concurrent operations on the hash bucket are properly synchronized to prevent race conditions and data corruption.
Acquiring inet_listen_hashbucket::lock with disabled BH can lead to potential security risks. Although the exact impact and attack plausibility have not been proven yet, it could potentially allow unauthorized access, manipulation of network connections, or disruption of network communication.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.3 or later, which includes the necessary fix commit 20a0b7c3279ab6e5b2ea942d2d64855a6136d6a9. Updating the Kernel ensures that the vulnerable code is replaced with the patched version, eliminating the possibility of acquiring inet_listen_hashbucket::lock with disabled BH.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
