Fix resource leaks in the error path of 'venus_probe()' in Kernel
Summary
GSD-2021-1000371: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'. Affects Kernel versions >= 32f0a6ddc8c98a1aade2bf3d07c79d5d2c6ceb9a, < 00b68a7478343afdf83f30c43e64db5296057030. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It is responsible for managing system resources, including memory, processes, and device drivers. The 'venus_probe()' function is a part of the media subsystem in the Kernel, specifically in the venus core module. This function is responsible for probing and initializing Venus hardware. However, there are resource leaks in the error path of this function, which can lead to memory leaks and other potential security vulnerabilities.
Vulnerability Detail
The vulnerability in 'venus_probe()' arises from resource leaks in the error path. When an error occurs during the probing and initialization of Venus hardware, certain resources are not properly released, resulting in memory leaks and potential security issues. Attackers may be able to exploit these vulnerabilities to gain unauthorized access, execute arbitrary code, or cause denial-of-service conditions. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The 'venus_probe()' function in the Kernel's venus core module has been found to have resource leaks in the error path. These leaks can lead to memory leaks and potential security vulnerabilities. It is crucial to update the Linux Kernel to version v5.10.37 or a later version, which includes the fix for this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it could potentially lead to memory leaks and other security issues. Attackers may exploit these vulnerabilities for unauthorized access, code execution, or denial-of-service attacks.
To fix this vulnerability, update the Linux Kernel to version v5.10.37 or a later version. The fix has been committed with hash 00b68a7478343afdf83f30c43e64db5296057030.
You can obtain the updated Kernel from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Kernel to the fixed version.
There is no information available regarding active exploitation of this vulnerability at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
