Null-Pointer Dereference Vulnerability in audit_filter_rules
Summary
UVI-2021-1001842: audit: fix possible null-pointer dereference in audit_filter_rules. Affects Kernel versions >= bf361231c295d92a28ca283ea713f56e93e55796, < 16802fa4c33eb1a8efb23f1e93365190e4047d05. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's core functions and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device drivers. The audit_filter_rules function within the Kernel package is responsible for handling audit rules and filtering events based on those rules.
Vulnerability Detail
The audit_filter_rules function in the Kernel package is susceptible to a null-pointer dereference vulnerability. This vulnerability, identified as UVI-2021-1001842, can be exploited by an attacker to cause a denial-of-service condition or potentially execute arbitrary code. The vulnerability arises from a flaw in the code that fails to properly handle null pointers, leading to a crash or system instability. This vulnerability was introduced in version v5.3 of the Linux Kernel and has been fixed in version v5.10.76.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the audit functionality or restrict access to the affected system. However, it is strongly advised to apply the official patch or update the Kernel package to ensure the long-term security and stability of the system.
Conclusion
The null-pointer dereference vulnerability in the audit_filter_rules function of the Kernel package can pose a significant security risk, potentially leading to a denial-of-service condition or arbitrary code execution. It is crucial to promptly update the Kernel package to version v5.10.76 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a denial-of-service condition or potential execution of arbitrary code, allowing attackers to disrupt system operations or gain unauthorized access.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this specific null-pointer dereference issue.
At the time of this report, there is no known exploit for this vulnerability. However, it is crucial to apply the recommended patch or update to mitigate any potential risks.
While a temporary workaround is to disable the audit functionality or restrict access to the affected system, it is highly recommended to apply the official patch or update the Kernel package to ensure comprehensive security and stability.
For more detailed information about this vulnerability, including technical specifics and the patch implementation, you can refer to the official Linux Kernel repository and the associated commit history.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
