Vulnerability in ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
Summary
GSD-2022-1001761: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock(). Affects Kernel versions >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < a7054aaf1909cf40489c0ec1b728fdcf79c751a6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ubifs package is a file system designed for use on flash devices. It is part of the Linux Kernel ecosystem and has been present since version 2.6.27. The package provides a reliable and efficient file system for flash storage, ensuring data integrity and minimizing wear on the flash memory. However, a vulnerability has been discovered in the ubifs_wbuf_write_nolock() function, which can lead to read out-of-bounds access. This vulnerability was fixed in Linux Kernel version 5.15.33.
Vulnerability Detail
The vulnerability in ubifs arises from a read out-of-bounds access in the ubifs_wbuf_write_nolock() function. This issue can potentially be exploited by an attacker to read sensitive information from kernel memory or cause a denial-of-service condition. The vulnerability was introduced in version 2.6.27 of the Linux Kernel and has been present until version 5.15.32. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version to address the issue effectively.
Conclusion
In conclusion, the ubifs package in the Linux Kernel is vulnerable to a read out-of-bounds access in the ubifs_wbuf_write_nolock() function. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version 5.15.33 or later. This update includes the necessary patch to address the issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Ubifs is a file system designed for use on flash devices. It provides a reliable and efficient file system for flash storage, minimizing wear on the flash memory and ensuring data integrity.
The vulnerability can potentially allow an attacker to read sensitive information from kernel memory or cause a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version 5.15.33 or later.
No, there is no known workaround for this vulnerability. Updating the Linux Kernel is the recommended solution.
The vulnerability was introduced in Linux Kernel version 2.6.27 and fixed in version 5.15.33.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
