Use After Free Vulnerability in lib/test Package
Summary
GSD-2022-1001488: lib/test: use after free in register_test_dev_kmod(). Affects Kernel versions >= d9c6a72d6fa29d3a7999dda726577e5d1fccafa5, < 0d26d371130d0edd59e9db0cf8142d460953d402. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The lib/test package is a component of the Linux Kernel ecosystem. It provides functionality for testing and debugging various aspects of the kernel. The package includes modules and functions that aid in the development and verification of kernel features. However, a vulnerability has been discovered in the package that can lead to a use after free scenario.
Vulnerability Detail
The use after free vulnerability in the lib/test package, specifically in the register_test_dev_kmod() function, allows an attacker to exploit a freed memory area. This can result in arbitrary code execution or a system crash. The vulnerability was introduced in version v4.13 of the Linux Kernel and is fixed in version v5.16.19. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The use after free vulnerability in the lib/test package of the Linux Kernel can lead to arbitrary code execution or system crashes. It is crucial to update the kernel to version v5.16.19 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The lib/test package is a component of the Linux Kernel ecosystem that provides functionality for testing and debugging various aspects of the kernel.
A use after free vulnerability occurs when a program continues to use a memory area after it has been freed. This can lead to unpredictable behavior and potential security risks.
The impact of this vulnerability can range from arbitrary code execution to a system crash, depending on how it is exploited.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.19 or later.
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
