Memory Leak in imu_fmt in Kernel
Summary
GSD-2021-1000059: media: staging/intel-ipu3: Fix memory leak in imu_fmt. Affects Kernel versions >= 6d5f26f2e045f2377b524516194657c00efbbce8, < 74ba0adb5e983503b18a96121d965cad34ac7ce3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and manages system resources. It acts as an interface between the hardware and software layers, allowing applications to communicate with the underlying hardware. The imu_fmt module in the Kernel's media staging/intel-ipu3 subsystem is responsible for handling image format operations for Intel Image Processing Units (IPU3). This vulnerability specifically affects the imu_fmt module and can lead to a memory leak.
Vulnerability Detail
The memory leak vulnerability in imu_fmt module of the Kernel's media staging/intel-ipu3 subsystem allows an attacker to cause a continuous loss of memory resources. By exploiting this vulnerability, an attacker can exhaust available memory, leading to system instability, performance degradation, and potential denial-of-service (DoS) conditions. The vulnerability was introduced in version v5.2 of the Linux Kernel and has been fixed in version v5.12.3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The memory leak vulnerability in the imu_fmt module of the Kernel's media staging/intel-ipu3 subsystem can have severe consequences, including system instability and potential denial-of-service (DoS) conditions. It is crucial to update the Linux Kernel to version v5.12.3 or later, which includes the necessary fix. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a continuous loss of memory resources, potentially causing system instability, performance degradation, and denial-of-service (DoS) conditions.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Yes, this vulnerability has been fixed in Linux Kernel version v5.12.3. It was addressed by the commit 74ba0adb5e983503b18a96121d965cad34ac7ce3.
As there is no specific workaround mentioned for this vulnerability, it is recommended to update the Linux Kernel to the fixed version as soon as possible.
You can find more information about this vulnerability in the GSD-2021-1000059 JSON file available in the GSD database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000059.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.