Vulnerability in Kernel: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
Summary
UVI-2021-1002304: bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs. Affects Kernel versions >= d055126180564a57fe533728a4e93d0cb53d49b3, < 439b99314b635b40f2e0622eabe62d7055bb409b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware. It is a critical part of the system, handling tasks such as process management, memory management, and device drivers. The vulnerability in question affects the Kernel's tracing progs, specifically the functions bpf_ktime_get_coarse_ns and bpf_timer_*. These functions are used for time-related operations in tracing programs implemented using the Berkeley Packet Filter (BPF) technology.
Vulnerability Detail
The vulnerability arises from the use of bpf_ktime_get_coarse_ns and bpf_timer_* functions in tracing progs. These functions can be misused by an attacker to manipulate time-related operations, potentially leading to various security issues. The impact and attack plausibility of this vulnerability have not been proven yet, but it is essential to address it to prevent any potential risks. The vulnerability was introduced in Kernel version v5.11 and has been fixed in version v5.15.5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to update the Kernel to the fixed version.
Conclusion
The vulnerability in the Kernel's tracing progs, specifically the functions bpf_ktime_get_coarse_ns and bpf_timer_*, has the potential to be exploited for malicious purposes. It is crucial to update the Kernel to version v5.15.5 or later to mitigate this vulnerability and ensure the security of the system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware.
Tracing progs in the Kernel are programs implemented using the Berkeley Packet Filter (BPF) technology. They are used for various debugging and performance analysis purposes.
The functions bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs are affected by this vulnerability.
The impact of this vulnerability is not yet proven, but it has the potential to be exploited for malicious purposes, leading to security issues.
To fix this vulnerability, it is recommended to update the Kernel to version v5.15.5 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
