dell / dell/libsmbios

time-of-check, time-of-use race condition

Open
#62 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
221
Forks
42
PR merge metrics
No merged PRs in 30d

Description

Team,

File: libsmbios/blob/master/src/libsmbios_c/smi/smi_linux.c#L307

```
int __hidden wmi_supported()
{
if (access(wmi_char, F_OK) != -1)
return 1;
return 0;
}
```

I believe this indicates a security flaw, If an attacker can change anything along the path between the call `access()` and the files actually used, attacker may exploit the race condition or a time-of-check, time-of-use race condition, request team to please have a look and validate.

Reference: https://linux.die.net/man/2/access

Contributor guide

No contributing guide indexed for this repository

Research direction

Read libsmbios/blob/master/src/libsmbios_c/smi/smi_linux.c around line 307 and review the access(2) reference. Determine whether wmi_supported() creates an exploitable check/use race in this code path; done means the security concern is validated or dismissed and an agreed remediation scope is recorded.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.