General Protection Fault in legacy_parse_param in Linux Kernel
Summary
GSD-2022-1001485: LSM: general protection fault in legacy_parse_param. Affects Kernel versions < 00fc07fa0b4a004711b6e1a944f0d2e46f7093b7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices, system resources, and software applications. The legacy_parse_param function is responsible for parsing parameters in the Linux Security Modules (LSM) subsystem. LSM is a framework that allows the implementation of various security modules in the kernel. These modules enforce security policies and perform access control checks. However, a vulnerability has been discovered in the legacy_parse_param function, which can lead to a general protection fault.
Vulnerability Detail
The vulnerability, identified as GSD-2022-1001485, manifests as a general protection fault in the legacy_parse_param function of the LSM subsystem in the Linux Kernel. A general protection fault occurs when the kernel detects an invalid memory access or an attempt to execute privileged instructions. This vulnerability can potentially be exploited by an attacker to crash the system or execute arbitrary code with kernel privileges. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.16.19 by commit 00fc07fa0b4a004711b6e1a944f0d2e46f7093b7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the Linux Kernel version v5.16.19, there is no specific workaround available. It is recommended to update to the fixed version as soon as possible.
Conclusion
In conclusion, a vulnerability has been discovered in the legacy_parse_param function of the LSM subsystem in the Linux Kernel. This vulnerability can potentially lead to a general protection fault, allowing an attacker to crash the system or execute arbitrary code with kernel privileges. It is crucial to update the Linux Kernel to version v5.16.19 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices, system resources, and software applications.
The legacy_parse_param function is responsible for parsing parameters in the Linux Security Modules (LSM) subsystem. LSM is a framework that allows the implementation of various security modules in the kernel.
A general protection fault occurs when the kernel detects an invalid memory access or an attempt to execute privileged instructions. It is a mechanism to protect the system from unauthorized or malicious actions.
This vulnerability can potentially be exploited by an attacker to crash the system or execute arbitrary code with kernel privileges. However, the actual impact and attack plausibility have not been proven yet.
Yes, this vulnerability has been fixed in Linux Kernel version v5.16.19 by commit 00fc07fa0b4a004711b6e1a944f0d2e46f7093b7.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
