Vulnerability in dell-smbios-wmi Package: Fix oops on rmmod dell_smbios
Summary
UVI-2021-1000517: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios. Affects Kernel versions >= 1a258e670434f404a4500b65ba1afea2c2b29bba, < 75cfc833da4a2111106d4c134e93e0c7f41e35e7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dell-smbios-wmi package is a component of the Linux Kernel ecosystem. It provides support for Dell System Management BIOS (SMBIOS) through the Windows Management Instrumentation (WMI) interface. This package allows users to access and manage various system information and settings on Dell computers. However, a vulnerability has been discovered in this package that can lead to an oops (kernel panic) when unloading the dell_smbios module using the rmmod command.
Vulnerability Detail
The vulnerability in the dell-smbios-wmi package arises from a flaw in the module unloading process. When attempting to remove the dell_smbios module using rmmod, an oops occurs, causing a kernel panic. This vulnerability can be exploited by an attacker with local access to the system to cause a denial-of-service (DoS) condition. The impact of this vulnerability is limited to Dell computers running Linux with the affected package version. The vulnerability was introduced in version v4.15 of the Linux Kernel and has been fixed in version v4.19.192.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to apply the recommended fix by updating their Linux Kernel to the latest version.
Conclusion
The vulnerability in the dell-smbios-wmi package can result in a denial-of-service (DoS) condition on Dell computers running Linux. To mitigate this vulnerability, users should update their Linux Kernel to version v4.19.192 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a denial-of-service (DoS) condition on Dell computers running Linux with the affected package version.
An attacker with local access to the system can exploit this vulnerability.
No, remote exploitation is not possible as the attacker requires local access to the system.
Yes, this vulnerability has been fixed in Linux Kernel version v4.19.192.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.