Race Condition Vulnerability in rxrpc_exit_net() in Kernel
Summary
GSD-2022-1001356: rxrpc: fix a race in rxrpc_exit_net(). Affects Kernel versions >= ace45bec6d77bc061c3c3d8ad99e298ea9800c2b, < 41024a40f6c793abbb916a857f18fb009f07464c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The rxrpc module in the Kernel is responsible for implementing the Reliable Datagram Protocol (RxRPC), which enables reliable communication between networked systems.
The vulnerability identified in rxrpc_exit_net() is a race condition, which occurs when multiple threads or processes access shared resources concurrently without proper synchronization. This can lead to unexpected behavior and potential security vulnerabilities.
Vulnerability Detail
The race condition vulnerability in rxrpc_exit_net() allows for a race condition to occur during the cleanup process when a network namespace is destroyed. This can result in the use of freed memory or other undefined behavior, potentially leading to a system crash or privilege escalation.
The vulnerability was introduced in version v4.17 of the Linux Kernel by commit ace45bec6d77bc061c3c3d8ad99e298ea9800c2b and is fixed in version v5.16.20 by commit 41024a40f6c793abbb916a857f18fb009f07464c.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the rxrpc module by blacklisting it. This can be done by adding the following line to the /etc/modprobe.d/blacklist.conf file:
blacklist rxrpc
After adding the line, the system needs to be rebooted for the changes to take effect. However, it is important to note that this workaround disables the functionality provided by the rxrpc module and should only be considered as a temporary measure until the Kernel is updated.
Conclusion
The race condition vulnerability in rxrpc_exit_net() in the Kernel can potentially lead to system crashes or privilege escalation. It is crucial to update the Linux Kernel to version v5.16.20 or later to mitigate this vulnerability. Alternatively, users can apply the temporary workaround of disabling the rxrpc module until the Kernel update is available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
A race condition vulnerability occurs when multiple threads or processes access shared resources concurrently without proper synchronization. This can lead to unexpected behavior and potential security vulnerabilities.
rxrpc_exit_net() is a function in the rxrpc module of the Linux Kernel that is responsible for cleaning up resources when a network namespace is destroyed.
The race condition vulnerability in rxrpc_exit_net() can result in the use of freed memory or other undefined behavior, potentially leading to a system crash or privilege escalation.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.20 or later. Alternatively, users can disable the rxrpc module as a temporary workaround.
Yes, a temporary workaround is to disable the rxrpc module by blacklisting it. However, this disables the functionality provided by the module and should only be considered as a temporary measure until the Kernel is updated.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
