Vulnerability in Kernel: highmem: fix checks in __kmap_local_sched_{in,out}
Summary
GSD-2022-1001679: highmem: fix checks in __kmap_local_sched_{in,out}. Affects Kernel versions >= 5fbda3ecd14a5343644979c98d6eb65b7e7de9d8, < c21d040de6225414547d9bd31cd200f290991c85. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the security and stability of the system. The highmem feature in the Kernel allows efficient memory management for systems with a large amount of physical memory. However, a vulnerability has been discovered in the highmem implementation that can potentially be exploited by attackers.
Vulnerability Detail
The vulnerability, identified as GSD-2022-1001679, is related to the checks in the _kmap_local_sched{in,out} functions in the highmem feature of the Kernel. The issue was introduced in version v5.11 of the Kernel by commit 5fbda3ecd14a5343644979c98d6eb65b7e7de9d8 and has been fixed in version v5.15.34 by commit c21d040de6225414547d9bd31cd200f290991c85. The exact impact and attack plausibility of this vulnerability have not been proven yet, but it is considered high severity. Further details can be found in the references link provided.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
In conclusion, a vulnerability has been discovered in the highmem feature of the Linux Kernel. It is important to update the Kernel to the patched version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a core component of the Linux operating system that manages system resources, facilitates communication between software components, and ensures the security and stability of the system.
Highmem is a feature in the Kernel that allows efficient memory management for systems with a large amount of physical memory.
The vulnerability was introduced in version v5.11 of the Kernel by commit 5fbda3ecd14a5343644979c98d6eb65b7e7de9d8.
The exact impact of this vulnerability has not been proven yet. However, it is considered high severity, indicating that it has the potential to be exploited by attackers.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.34 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
