Vulnerability in Kernel: net: bridge: fix vlan tunnel dst refcnt when egressing
Summary
UVI-2021-1001007: net: bridge: fix vlan tunnel dst refcnt when egressing. Affects Kernel versions >= 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd, < fc7fdd8c5c2ad2fe3e297698be9d4dbe4a4e0579. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between different software components, and ensures the security and stability of the system. The net: bridge module in the Kernel is responsible for bridging network traffic between different interfaces. It allows packets to be forwarded between network interfaces, including virtual LAN (VLAN) tunnels.
However, a vulnerability has been identified in the net: bridge module that affects the handling of VLAN tunnel destination reference count when egressing. This vulnerability can potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code on the affected system.
Vulnerability Detail
The vulnerability in the net: bridge module arises from an incorrect reference count handling of VLAN tunnel destinations during egress. When forwarding packets through VLAN tunnels, the reference count of the destination is not properly managed, leading to potential memory corruption or use-after-free vulnerabilities. An attacker with access to the affected system can exploit this vulnerability to crash the system or execute arbitrary code with elevated privileges.
The vulnerability was introduced in version v4.11 of the Linux Kernel by commit 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd and is fixed in version v5.10.46 by commit fc7fdd8c5c2ad2fe3e297698be9d4dbe4a4e0579.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment. It is recommended to apply the official fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the net: bridge module of the Linux Kernel can lead to a denial-of-service (DoS) condition or arbitrary code execution. It is crucial to update the Kernel to version v5.10.46 or later to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code on the affected system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any open-source vulnerabilities, including this one.
At the time of this report, there is no known exploit in the wild targeting this specific vulnerability. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
This vulnerability requires an attacker to have access to the affected system in order to exploit it. It cannot be exploited remotely without prior access.
The only effective mitigation for this vulnerability is to update the Linux Kernel to the latest version that includes the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
