Memory Leak in Linux Kernel videobuf Subsystem
Summary
CVE-2010-5321: Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides core functionality, including device drivers, process management, and memory management. The videobuf subsystem is responsible for handling video data in the kernel. It allows applications to access video devices through the /dev/video interface. However, a memory leak vulnerability has been identified in the videobuf subsystem, affecting Linux kernel versions 2.6.x through 4.x.
Vulnerability Detail
The memory leak vulnerability in the videobuf subsystem arises when a local user leverages /dev/video access to make a series of mmap calls that require new allocations. This can lead to a denial of service (DoS) condition by consuming excessive memory resources. It is important to note that this vulnerability (CVE-2010-5321) is distinct from CVE-2007-6761. The impact of this vulnerability is limited to 11 drivers that have not been updated to use videobuf2 instead of videobuf.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The memory leak vulnerability in the Linux kernel's videobuf subsystem can lead to a denial of service (DoS) condition. It is crucial to update the affected drivers to use videobuf2 instead of videobuf to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause a denial of service (DoS) condition by consuming excessive memory resources.
The vulnerability affects Linux kernel versions 2.6.x through 4.x.
You can check the Linux kernel version being used and verify if any of the 11 drivers are still using videobuf instead of videobuf2.
No known exploits have been reported for this vulnerability.
Updating the affected drivers to use videobuf2 instead of videobuf is the recommended solution. Consult the official documentation or the vendor for specific patch instructions.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
