Page Use-After-Free Vulnerability in scsi: target: tcmu
Summary
GSD-2022-1002162: scsi: target: tcmu: Fix possible page UAF. Affects Kernel versions < fb7a5115422fbd6a4d505e8844f1ef5529f10489. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The scsi: target: tcmu package is a component of the Linux Kernel that provides support for the Target Core Modem Unit (TCMU) subsystem. This subsystem allows users to create virtual SCSI devices that can be accessed by other systems over a network. It is commonly used in storage virtualization and cloud computing environments. However, a vulnerability has been discovered in the package that could potentially lead to a page use-after-free issue.
Vulnerability Detail
The page use-after-free vulnerability in scsi: target: tcmu arises from a flaw in the handling of certain operations. An attacker could exploit this vulnerability by sending specially crafted requests to a virtual SCSI device created using the tcmu subsystem. If successful, the attacker may be able to trigger a use-after-free condition, leading to potential memory corruption and the possibility of executing arbitrary code. This could result in a privilege escalation or a denial of service (DoS) attack. The vulnerability has been assigned the ID GSD-2022-1002162 and has been fixed in Linux Kernel version v5.4.190 by commit fb7a5115422fbd6a4d505e8844f1ef5529f10489.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the tcmu subsystem or restrict access to virtual SCSI devices created using tcmu. This can be achieved by modifying the system configuration or using access control mechanisms to limit the privileges of users or processes interacting with tcmu. However, it is strongly recommended to apply the official fix by updating the Linux Kernel to ensure comprehensive security.
Conclusion
In conclusion, the scsi: target: tcmu package in the Linux Kernel is vulnerable to a page use-after-free issue. This vulnerability could potentially allow an attacker to execute arbitrary code or escalate privileges on a system. It is crucial to update the Linux Kernel to version v5.4.190 or later to mitigate this vulnerability. Additionally, users can apply workarounds such as disabling the tcmu subsystem or restricting access to virtual SCSI devices created using tcmu. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially allow an attacker to execute arbitrary code or escalate privileges on a system running the affected version of the scsi: target: tcmu package. This could lead to unauthorized access, data theft, or disruption of services.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for any known vulnerabilities, including this one.
Yes, a patch has been released in Linux Kernel version v5.4.190. It is recommended to update your system to this version or later to mitigate the vulnerability.
At the time of this report, there are no known exploits for this vulnerability. However, it is important to apply the patch or update the Linux Kernel as soon as possible to prevent any potential exploitation.
This vulnerability was discovered by an automated security analysis tool and reported as part of the GSD-2022-1002162 advisory. The actual impact and attack plausibility have not yet been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
