UAF bug in ax25_send_control() in Kernel
Summary
GSD-2022-1001749: ax25: fix UAF bug in ax25_send_control(). Affects Kernel versions >= 452ae92b99062d2f6a34324eaf705a3b7eac9f8b, < 1bf8946d5826788c82971977245bcd3313678eac. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the security and stability of the system. The ax25 module in the Kernel is responsible for implementing the AX.25 protocol, which is used for packet radio communication. This vulnerability affects the ax25_send_control() function within the ax25 module.
Vulnerability Detail
The UAF (Use-After-Free) bug in ax25_send_control() allows an attacker to exploit a memory corruption issue. By manipulating certain parameters, an attacker can trigger the use of a freed memory area, leading to potential arbitrary code execution or a system crash. The impact and attack plausibility of this vulnerability have not been proven yet, but it is essential to address it to prevent any potential security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, if updating the Kernel is not immediately feasible, it is advisable to disable the ax25 module or remove it from the system. This can be achieved by executing the following commands:
sudo rmmod ax25
Conclusion
The UAF bug in ax25_send_control() poses a potential security risk in the Kernel's ax25 module. It is recommended to update the Kernel to version v5.15.35 or later to fix this vulnerability. If immediate updating is not possible, disabling or removing the ax25 module can serve as a temporary workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ax25 module in the Kernel implements the AX.25 protocol, which is used for packet radio communication. It allows Linux systems to communicate over amateur radio frequencies.
A UAF (Use-After-Free) bug is a type of memory corruption vulnerability where a program continues to use a memory area after it has been freed. This can lead to unpredictable behavior, crashes, or potential exploitation by an attacker.
If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code or cause a system crash, potentially leading to a denial of service or unauthorized access to sensitive information.
As of now, there is no known exploit for this vulnerability. However, it is crucial to apply the recommended fix or workaround to mitigate any potential risks.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
