Memory Leak in ACPI: scan
Summary
GSD-2021-1000200: ACPI: scan: Fix a memory leak in an error handling path. Affects Kernel versions >= eb50aaf960e3bedfef79063411ffd670da94b84b, < a7e17a8d421ae23c920240625b4413c7b94d94a4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ACPI (Advanced Configuration and Power Interface) is an open standard for power management and configuration of computer hardware. It provides a platform-independent interface for controlling power and configuration settings. The ACPI scan function is responsible for detecting and initializing ACPI devices in the system. However, a memory leak vulnerability has been identified in the error handling path of the ACPI scan function.
Vulnerability Detail
The vulnerability in the ACPI scan function can lead to a memory leak. When an error occurs during the scanning process, memory allocated for ACPI devices may not be properly freed, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The memory leak vulnerability in the ACPI scan function can be fixed by updating the Linux Kernel to version v5.12.5 or later. It is important to promptly apply the necessary updates to ensure the security and stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ACPI (Advanced Configuration and Power Interface) is an open standard for power management and configuration of computer hardware.
The ACPI scan function is responsible for detecting and initializing ACPI devices in the system.
A memory leak is a type of software defect where memory that is no longer needed is not properly released, leading to a gradual loss of available memory resources.
The impact of this vulnerability is a potential denial-of-service condition due to the exhaustion of system memory resources.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.5 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
