Vulnerability in Linux Kernel: drivers/base/node.c - Compaction Sysfs File Leak
Summary
GSD-2022-1004067: drivers/base/node.c: fix compaction sysfs file leak. Affects Kernel versions >= ed4a6d7f0676db50b5023cc01f6cda82a2f2a307, < 39642b0feddb9c39faa6de469a94bfeb4dc0d3a9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware management, process scheduling, memory management, and device drivers. The drivers/base/node.c file in the Linux Kernel is responsible for managing the system's NUMA (Non-Uniform Memory Access) nodes. NUMA is a memory architecture that allows multiple processors to access different memory regions, improving performance. However, a vulnerability has been discovered in the node.c file that can lead to a sysfs file leak in the compaction subsystem.
Vulnerability Detail
The vulnerability in drivers/base/node.c allows an attacker to cause a sysfs file leak in the compaction subsystem. Sysfs is a virtual file system in Linux that provides a view of the kernel's device hierarchy. By exploiting this vulnerability, an attacker can continuously create and delete sysfs files, leading to resource exhaustion and potential denial-of-service (DoS) conditions. The vulnerability was introduced in version v2.6.35 of the Linux Kernel and has been fixed in version v4.9.318.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the compaction subsystem by modifying the kernel configuration. This can be achieved by editing the kernel configuration file and disabling the CONFIG_COMPACTION option. However, this workaround may impact system performance and should only be considered if updating the kernel is not immediately feasible. Here is an example of how to disable the compaction subsystem in the kernel configuration:
# Open the kernel configuration file
sudo nano /usr/src/linux/.config
# Find the CONFIG_COMPACTION option
# Change the value to 'n' to disable the compaction subsystem
CONFIG_COMPACTION=n
# Save the changes and exit the editor
# Recompile and install the kernel
Conclusion
In conclusion, a vulnerability has been discovered in the Linux Kernel's drivers/base/node.c file that can lead to a sysfs file leak in the compaction subsystem. This vulnerability can result in resource exhaustion and potential denial-of-service (DoS) conditions. It is crucial to update the Linux Kernel to version v4.9.318 or later to mitigate this vulnerability. If you need further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion and potential denial-of-service (DoS) conditions due to sysfs file leaks in the compaction subsystem.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Linux Kernel version is affected by this vulnerability. Simply upload your package-lock.json file and the Vulert Playground will analyze it for vulnerabilities in real-time.
Yes, a patch for this vulnerability is available in version v4.9.318 of the Linux Kernel. It is recommended to update to this version or a later one to fix the vulnerability.
As a temporary workaround, you can disable the compaction subsystem by modifying the kernel configuration. However, this may impact system performance and updating the kernel is the recommended long-term solution.
There are no known exploits for this vulnerability at the moment. However, it is important to apply the patch or update the kernel as soon as possible to prevent potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
