Memory Leak in ACPI: scan
Summary
GSD-2021-1000319: ACPI: scan: Fix a memory leak in an error handling path. Affects Kernel versions >= 4a5891992c680d69d7e490e4d0428d17779d8e85, < e2381174daeae0ca35eddffef02dcc8de8c1ef8a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ACPI (Advanced Configuration and Power Interface) is a standard for handling power management and configuration of computer systems. The ACPI scan functionality is responsible for detecting and configuring ACPI devices in the system. This vulnerability affects the Linux Kernel, specifically versions v5.10.27 to v5.10.37. It was introduced in commit 4a5891992c680d69d7e490e4d0428d17779d8e85 and fixed in commit e2381174daeae0ca35eddffef02dcc8de8c1ef8a.
Vulnerability Detail
The vulnerability in the ACPI scan functionality leads to a memory leak in an error handling path. When an error occurs during the scanning process, memory allocated for ACPI devices is not properly freed, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition or other unpredictable behavior.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the ACPI scan functionality in the Linux Kernel versions v5.10.27 to v5.10.37 is vulnerable to a memory leak issue. This vulnerability can potentially lead to system instability or denial-of-service conditions. It is recommended to update the Linux Kernel to version v5.10.38 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ACPI (Advanced Configuration and Power Interface) is a standard for handling power management and configuration of computer systems. It provides an interface between the operating system, firmware, and hardware components.
This vulnerability can lead to a memory leak in the ACPI scan functionality, potentially causing system instability, resource exhaustion, or denial-of-service conditions.
You can check if your system is affected by this vulnerability by examining the Linux Kernel version. If your system is running Linux Kernel version v5.10.27 to v5.10.37, it is vulnerable.
There are no known exploits for this vulnerability at the time of this report. However, it is recommended to apply the necessary updates to mitigate the risk.
For more information about this vulnerability, you can refer to the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
