Fix compaction sysfs file leak in Linux Kernel
Summary
GSD-2022-1003761: drivers/base/node.c: fix compaction sysfs file leak. Affects Kernel versions >= ed4a6d7f0676db50b5023cc01f6cda82a2f2a307, < 386e69e068177ee91cac27f2f0e6ebda1515f5ca. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The vulnerability in question affects the 'drivers/base/node.c' file, which is responsible for managing the system's NUMA (Non-Uniform Memory Access) nodes. NUMA is a memory architecture that allows multiple processors to access different memory regions, improving performance in certain workloads.
Vulnerability Detail
The vulnerability in 'drivers/base/node.c' results in a sysfs file leak related to compaction. Sysfs is a virtual file system that provides a structured interface for accessing and manipulating kernel data. The issue allows an attacker to exhaust system resources by repeatedly creating and not properly releasing sysfs files related to compaction. This can lead to a denial-of-service (DoS) condition, potentially impacting system stability and availability. The vulnerability was introduced in Linux Kernel version 2.6.35 and has been fixed in version 5.4.198.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable compaction-related functionality in the kernel configuration if it is not required for their specific use case. This can be achieved by modifying the kernel configuration file and removing the relevant configuration options related to compaction. However, this workaround should be carefully evaluated, as it may impact system performance in certain scenarios.
Conclusion
The vulnerability in 'drivers/base/node.c' of the Linux Kernel can lead to a denial-of-service (DoS) condition by exhausting system resources. It is crucial to update the kernel to version 5.4.198 or later to mitigate this vulnerability. Users can also consider disabling compaction-related functionality as a temporary workaround, but updating the kernel is strongly recommended. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a denial-of-service (DoS) condition by exhausting system resources. This can result in system instability and unavailability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for any known vulnerabilities, including this one.
At the time of this report, there are no known public exploits targeting this specific vulnerability. However, it is always recommended to apply security patches promptly to mitigate potential risks.
As mentioned in the 'workaround' section, you can disable compaction-related functionality in the kernel configuration if it is not required for your use case. However, it is still advisable to update the kernel to the latest version as soon as possible.
You can refer to the Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) for more details about the fix. The vulnerability details can be found in the Cloud Security Alliance GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003761.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
