Memory Leak in ACPI: scan
Summary
GSD-2021-1000442: ACPI: scan: Fix a memory leak in an error handling path. Affects Kernel versions >= 7385e438e1f31af5b86f72fd19b0dcd2738502c9, < 69cc821e89ce572884548ac54c4f80eec7a837a5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ACPI (Advanced Configuration and Power Interface) is a standard for power management and configuration of computer hardware. It provides an interface between the operating system and the computer's firmware. The ACPI scan functionality is responsible for discovering and enumerating ACPI devices in the system. This vulnerability in the ACPI scan code can lead to a memory leak in certain error handling scenarios.
Vulnerability Detail
The vulnerability arises from a memory leak in the error handling path of the ACPI scan code. When an error occurs during the scanning process, memory allocated for ACPI device objects is not properly freed, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The vulnerability in the ACPI scan code could result in a memory leak and potential denial-of-service condition. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ACPI stands for Advanced Configuration and Power Interface. It is a standard for power management and configuration of computer hardware.
ACPI scan is responsible for discovering and enumerating ACPI devices in the system.
A memory leak occurs when memory that is no longer needed is not properly freed, leading to a gradual loss of available memory resources.
The impact of this vulnerability is a potential denial-of-service condition due to memory exhaustion.
To fix this vulnerability, update your Linux Kernel to version v4.19.191 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
