net: dsa: felix: fix possible NULL pointer dereference
Summary
GSD-2022-1001090: net: dsa: felix: fix possible NULL pointer dereference. Affects Kernel versions >= 23ae3a7877718931474684ef4fbbaf1d1511ee84, < b7ff8b5e75d4e91ec8c62d621aac8dfb84c57aa9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: dsa: felix package is a component of the Linux Kernel, which is responsible for managing network interfaces and protocols. It provides support for Distributed Switch Architecture (DSA) and specifically the Felix switch. The Felix switch is used in networking devices to enable communication between different network segments. This vulnerability in the package could lead to a NULL pointer dereference, potentially causing a system crash or allowing an attacker to execute arbitrary code.
Vulnerability Detail
The vulnerability in net: dsa: felix is due to a possible NULL pointer dereference. When certain conditions are met, a NULL pointer can be accessed, leading to a crash or potential code execution. The impact and attack plausibility of this vulnerability have not been proven yet. It was introduced in version v5.17 of the Linux Kernel and fixed in version v5.17.3 by commit b7ff8b5e75d4e91ec8c62d621aac8dfb84c57aa9. For more details, refer to the references link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The net: dsa: felix package in the Linux Kernel is vulnerable to a NULL pointer dereference, which can result in system crashes or potential code execution. It is crucial to update to version v5.17.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Net: dsa: felix is a component of the Linux Kernel that provides support for the Felix switch, which is used in networking devices for communication between network segments.
A NULL pointer dereference occurs when a program attempts to access a memory address that is NULL (has not been assigned a valid value). This can lead to a crash or potential code execution.
The potential consequences of this vulnerability include system crashes and the possibility of an attacker executing arbitrary code.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will provide real-time alerts for open-source vulnerabilities.
No specific workaround has been provided for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
