net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
Summary
GSD-2022-1002167: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib(). Affects Kernel versions >= af5f60c7e3d593c2fa31b9a62c16eae75f074de3, < a05f5e26cb8bb4d07e0595545fcad1bb406f0085. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/smc package is a part of the Linux Kernel ecosystem. It provides support for the SMC (System Management Controller) protocol, which enables communication between systems in a cluster. The smc_pnet_find_ib() function is responsible for finding the InfiniBand (IB) device associated with a given SMC PNET ID. However, a vulnerability in this function can lead to a NULL pointer dereference.
Vulnerability Detail
The vulnerability in net/smc's smc_pnet_find_ib() function allows an attacker to trigger a NULL pointer dereference, potentially leading to a system crash or privilege escalation. This vulnerability was introduced in Linux Kernel version v5.1 and fixed in v5.4.190. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The net/smc package in the Linux Kernel is vulnerable to a NULL pointer dereference in the smc_pnet_find_ib() function. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.4.190 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net/smc package is a component of the Linux Kernel that supports the SMC protocol for inter-system communication in clusters.
smc_pnet_find_ib() is a function within net/smc that is responsible for finding the InfiniBand device associated with a given SMC PNET ID.
A NULL pointer dereference occurs when a program attempts to access or manipulate data through a null pointer, leading to a crash or potential security vulnerabilities.
The vulnerability can result in a system crash or potential privilege escalation, although the actual impact and attack plausibility have not been proven yet.
To fix this vulnerability, update your Linux Kernel to version v5.4.190 or later, which includes the necessary fix for the NULL pointer dereference issue in smc_pnet_find_ib().
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
