Vulnerability in Kernel package: block, bfq: don't move oom_bfqq
Summary
GSD-2022-1001482: block, bfq: don't move oom_bfqq. Affects Kernel versions < 87fdfe8589d43e471dffb4c60f75eeb6f37afc4c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The block subsystem within the Kernel package handles block devices like hard drives and SSDs. The Budget Fair Queueing (BFQ) scheduler is a component of the block subsystem that aims to provide low-latency and fairness guarantees for block I/O operations. However, a vulnerability has been identified in the BFQ scheduler that could potentially lead to security issues.
Vulnerability Detail
The identified vulnerability in the Kernel package's BFQ scheduler involves the inappropriate movement of the oom_bfqq (out-of-memory budget fair queue) during certain operations. This vulnerability could be exploited by an attacker to gain unauthorized access or disrupt the system's normal functioning. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.16.19 through commit 87fdfe8589d43e471dffb4c60f75eeb6f37afc4c.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. It is advised to prioritize updating the Kernel package to the fixed version as soon as possible.
Conclusion
In conclusion, a vulnerability has been identified in the Kernel package's BFQ scheduler. It is crucial to update the package to version v5.16.19 or later to mitigate the potential risks associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system that manages system resources and facilitates communication between hardware and software.
The BFQ scheduler is a component of the Kernel's block subsystem that aims to provide low-latency and fairness guarantees for block I/O operations.
The impact of this vulnerability is not yet proven. However, it could potentially lead to unauthorized access or disruption of the system's normal functioning.
To fix this vulnerability, it is recommended to update the Kernel package to version v5.16.19 or later.
No specific workaround has been mentioned for this vulnerability. It is advised to prioritize updating the Kernel package to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
