UAF Vulnerability in Kernel: peak_pci_remove()
Summary
UVI-2021-1001887: can: peak_pci: peak_pci_remove(): fix UAF. Affects Kernel versions >= e6d9c80b7ca1504411ad6d7acdb8683e4ae1c9cd, < 0e5afdc2315b0737edcf55bede4ee1640d2d464d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The peak_pci module in the Kernel is responsible for handling the communication with the PEAK-System Technik GmbH PCI CAN interfaces. These interfaces enable the system to connect and interact with Controller Area Network (CAN) devices. However, a vulnerability has been identified in the peak_pci_remove() function, which can lead to a use-after-free (UAF) condition.
Vulnerability Detail
The UAF vulnerability in the peak_pci_remove() function of the Kernel can be exploited by an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability arises due to improper handling of resources during the removal of the PEAK-System Technik GmbH PCI CAN interfaces. By manipulating certain parameters, an attacker can trigger the UAF condition, leading to memory corruption and potential code execution. The impact of this vulnerability can range from privilege escalation to system crashes, depending on the attacker's capabilities and intentions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable or remove the peak_pci module from the Kernel if it is not required for their system. This can be done by modifying the Kernel configuration and rebuilding it without the peak_pci module. However, this workaround may not be feasible for systems that rely on the functionality provided by the peak_pci module.
Conclusion
The UAF vulnerability in the peak_pci_remove() function of the Kernel can have serious security implications. It is crucial to update the Kernel to a version that includes the fix to prevent potential exploitation. Users can also use Vulert's playground (https://vulert.com/scanner) to check if their system is affected by this vulnerability. For further support and assistance with vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from privilege escalation to system crashes, depending on the attacker's capabilities and intentions. It could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Yes, a fix for this vulnerability is available in the Linux Kernel version v5.14.15 or later. Users should update their Kernel to a version that includes the fix.
As a temporary mitigation, you can disable or remove the peak_pci module from the Kernel if it is not required for your system. However, this may not be feasible for systems that rely on the functionality provided by the module.
You can find more information about this vulnerability in the Open Source Vulnerability database maintained by the Cloud Security Alliance. The specific vulnerability ID is UVI-2021-1001887.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
