udmabuf: validate ubuf->pagecount
Summary
GSD-2022-1002100: udmabuf: validate ubuf->pagecount. Affects Kernel versions >= fbb0de795078190a9834b3409e4b009cfb18a6d4, < b267a8118c2b171bf7d67b90ed64154eeab9fae0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The udmabuf package is a Linux kernel module that provides a character device interface for user-space applications to allocate and share contiguous memory buffers. It is commonly used in embedded systems and high-performance computing environments. The udmabuf module allows user-space applications to allocate and map memory buffers using the DMA (Direct Memory Access) API. These buffers can then be shared between different processes or devices. However, a vulnerability has been discovered in the udmabuf module that could potentially allow an attacker to bypass certain security checks and gain unauthorized access to sensitive information or execute arbitrary code.
Vulnerability Detail
The vulnerability in the udmabuf module is due to a lack of proper validation of the 'pagecount' field in the 'ubuf' structure. This field specifies the number of pages allocated for the buffer. By manipulating this field, an attacker could potentially allocate a smaller or larger buffer than intended, leading to buffer overflows or underflows. This could result in memory corruption, privilege escalation, or denial of service. The vulnerability was introduced in version v4.20 of the Linux kernel and has been fixed in version v5.10.110.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the kernel is not immediately feasible, a temporary workaround is to disable the udmabuf module or remove it from the system. This can be done by blacklisting the module or removing its associated kernel module file. However, this workaround may impact the functionality of applications or services that rely on the udmabuf module.
Conclusion
The udmabuf module in the Linux kernel is vulnerable to a validation issue in the 'pagecount' field of the 'ubuf' structure. This could potentially lead to memory corruption, privilege escalation, or denial of service. It is recommended to update the kernel to version v5.10.110 or later to fix this vulnerability. If immediate kernel update is not possible, disabling or removing the udmabuf module can serve as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The udmabuf package is a Linux kernel module that provides a character device interface for user-space applications to allocate and share contiguous memory buffers.
The vulnerability could potentially allow an attacker to bypass security checks and gain unauthorized access to sensitive information or execute arbitrary code.
To fix this vulnerability, it is recommended to update the Linux kernel to version v5.10.110 or later.
A temporary workaround is to disable or remove the udmabuf module from the system.
The vulnerability was introduced in version v4.20 of the Linux kernel and has been fixed in version v5.10.110.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
