Memory Leak Vulnerability in amt Package
Summary
GSD-2022-1002738: amt: fix memory leak for advertisement message. Affects Kernel versions >= cbc21dc1cfe949e37b2a54c71511579f1899e8d4, < e7322da399fb86a2072f008b56f7160afa1b2051. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The amt package is a component of the Linux Kernel ecosystem. It provides functionality related to Active Management Technology (AMT) for Intel-based systems. AMT allows remote management and monitoring capabilities for system administrators. The vulnerability in the amt package leads to a memory leak in the advertisement message functionality.
Vulnerability Detail
The memory leak vulnerability in the amt package occurs when processing advertisement messages. It was introduced in version v5.16 of the Linux Kernel and affects all subsequent versions until v5.18.3. An attacker could exploit this vulnerability to exhaust system memory resources, potentially leading to a denial-of-service (DoS) condition. The vulnerability has been fixed in Linux Kernel version v5.18.3 by commit e7322da399fb86a2072f008b56f7160afa1b2051.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The memory leak vulnerability in the amt package can be mitigated by updating the Linux Kernel to version v5.18.3 or later. It is important to apply this fix to prevent potential memory exhaustion and denial-of-service (DoS) attacks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing a denial-of-service (DoS) condition.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will provide real-time monitoring and alerts for open-source vulnerabilities.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the recommended fix to mitigate any potential risks.
This vulnerability specifically affects the amt package in the Linux Kernel. However, it is always recommended to keep all packages and dependencies up to date to ensure overall system security.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2022-1002738 at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002738.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
