SUNRPC: Fix the svc_deferred_event trace class in Kernel
Summary
GSD-2022-1001962: SUNRPC: Fix the svc_deferred_event trace class. Affects Kernel versions >= ece200ddd54b9ce840cfee554fb812560c545c7d, < 85ee17ca21cf92989e8c923e3ea4514c291e9d38. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and enables the execution of user programs. The SUNRPC (Simple Unified Network RPC) subsystem within the Kernel is responsible for handling remote procedure calls (RPC) over a network. It allows processes on different systems to communicate and share resources. The svc_deferred_event trace class is a feature of SUNRPC that helps trace deferred events in the subsystem.
Vulnerability Detail
The vulnerability identified as GSD-2022-1001962 in the Kernel's SUNRPC subsystem affects versions 4.17 to 5.10.112. It is related to the svc_deferred_event trace class. The exact impact and attack plausibility of this vulnerability have not been proven yet. However, it is crucial to address it to prevent potential security risks. The vulnerability was introduced in version 4.17 and fixed in version 5.10.112 of the Linux Kernel. The fix can be found in commit 85ee17ca21cf92989e8c923e3ea4514c291e9d38.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel's SUNRPC subsystem related to the svc_deferred_event trace class has been identified and fixed in version 5.10.112. It is recommended to update the Kernel to the latest stable version to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices.
SUNRPC (Simple Unified Network RPC) is a subsystem in the Linux Kernel that handles remote procedure calls (RPC) over a network.
The svc_deferred_event trace class is a feature of the SUNRPC subsystem that helps trace deferred events.
The exact impact of this vulnerability is not yet proven. However, it is important to address it to mitigate potential security risks.
To fix this vulnerability, update the Linux Kernel to version 5.10.112 or later by obtaining the latest stable version from the official Git repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
