Memory Leak Vulnerability in Linux Kernel: GPU Metrics Table Not Freed
Summary
CVE-2021-47658: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in renoir_init_smc_tables(), but not freed in int sm... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware resources and providing essential services for software applications. It is known for its stability, performance, and flexibility. However, like any complex software, it is susceptible to vulnerabilities. This specific issue relates to the AMD GPU metrics table, which, if not properly managed, can lead to memory leaks, affecting system performance and stability.
Vulnerability Detail
In the Linux kernel, specifically within the AMD DRM (Direct Rendering Manager) subsystem, a vulnerability has been identified where memory allocated for the gpu_metrics_table is not freed during the shutdown process. This oversight occurs in the renoir_init_smc_tables() function, where memory is allocated, but not released in the smu_v12_0_fini_smc_tables() function. The failure to free this memory can lead to a gradual increase in memory usage, potentially exhausting system resources and causing crashes or degraded performance over time.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The CVE-2021-47658 vulnerability in the Linux kernel poses a significant risk due to a memory leak associated with the AMD GPU metrics table. Users are encouraged to update their systems promptly to mitigate potential impacts. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2021-47658 is a vulnerability in the Linux kernel related to a memory leak in the AMD GPU metrics table.
If left unaddressed, this vulnerability can lead to increased memory usage, potentially causing system slowdowns or crashes.
The vulnerability affects Linux versions in Debian 11, 12, and 13. It is recommended to check for updates.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities without requiring signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
