Vulnerability in Kernel: hns3 VLAN List Lock Protection
Summary
GSD-2022-1001491: net: hns3: add vlan list lock to protect vlan list. Affects Kernel versions >= c6075b193462d9a3930fb41f587f94720658752a, < 09e383ca97e798f9954189b741af54b5c51e7a97. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionality for networking, device drivers, and other core operations. The hns3 module within the Kernel is specifically designed for Huawei HiSilicon Network Subsystem 3 (hns3) Ethernet controllers. It enables network connectivity and supports various features, including VLAN (Virtual Local Area Network) configuration.
VLANs allow for the segmentation of a physical network into multiple virtual networks, enhancing network efficiency and security. The hns3 module maintains a list of configured VLANs.
However, a vulnerability has been discovered in the hns3 module, where the VLAN list is not adequately protected. This could potentially lead to unauthorized access or modification of VLAN configurations, compromising network integrity and security.
Vulnerability Detail
The vulnerability in the hns3 module arises from the absence of proper locking mechanisms to safeguard the VLAN list. Without appropriate locks, concurrent access to the list can result in race conditions and data corruption. An attacker could exploit this vulnerability to manipulate VLAN configurations, potentially leading to network disruptions, unauthorized access, or even privilege escalation.
The vulnerability was introduced in Linux Kernel version v5.1 by commit c6075b193462d9a3930fb41f587f94720658752a and has been fixed in version v5.16.19 by commit 09e383ca97e798f9954189b741af54b5c51e7a97.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually apply the necessary locking mechanisms to protect the VLAN list in the hns3 module. This can be achieved by modifying the relevant code in the Kernel source and recompiling it. The following code snippet demonstrates the addition of a lock:
// Acquire the VLAN list lock
spin_lock(&vlan_list_lock);
// Perform VLAN list operations
...
// Release the VLAN list lock
spin_unlock(&vlan_list_lock);
Conclusion
The vulnerability in the hns3 module of the Kernel poses a risk to network security and integrity. It allows unauthorized access and modification of VLAN configurations, potentially leading to network disruptions and privilege escalation. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.16.19 or later. Alternatively, users can manually apply the provided workaround until an official update is available. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability in the hns3 module can potentially allow unauthorized access or modification of VLAN configurations. This could lead to network disruptions, compromised network security, and even privilege escalation.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities, including this one.
Yes, a patch has been released in Linux Kernel version v5.16.19. It is recommended to update to this version or a later one to mitigate the vulnerability.
Yes, you can manually add locking mechanisms to protect the VLAN list in the hns3 module. Refer to the provided workaround section for more details.
There are no known instances of this vulnerability being actively exploited at the time of this report. However, it is crucial to apply the necessary fixes to ensure the security and integrity of your system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
