Memory Leak in ACPI: scan
Summary
GSD-2021-1000464: ACPI: scan: Fix a memory leak in an error handling path. Affects Kernel versions >= 717d9d88fbd956ab03fad97266f6ce63a036e7f8, < 5ab9857dde7c3ea3faef6b128d718cf8ba98721b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ACPI (Advanced Configuration and Power Interface) is a standard for power management and configuration of computer hardware. It provides an interface between the operating system and the computer's firmware. The ACPI scan function is responsible for discovering and initializing ACPI devices. This vulnerability affects the Linux Kernel, specifically versions v4.14.228 to v4.14.232. The vulnerability allows for a memory leak in an error handling path, potentially leading to resource exhaustion and system instability.
Vulnerability Detail
The vulnerability arises from a memory leak in the error handling path of the ACPI scan function. When an error occurs during the scanning process, memory allocated for ACPI devices is not properly freed, resulting in a memory leak. An attacker could potentially trigger this error condition repeatedly, causing a gradual depletion of system memory and eventual system instability. The impact of this vulnerability may vary depending on the specific system configuration and usage patterns.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the ACPI scan function of the Linux Kernel can lead to a memory leak, potentially causing resource exhaustion and system instability. It is recommended to update the Linux Kernel to version v4.14.233 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ACPI (Advanced Configuration and Power Interface) is a standard for power management and configuration of computer hardware. It provides an interface between the operating system and the computer's firmware.
The ACPI scan function is responsible for discovering and initializing ACPI devices in the system.
A memory leak occurs when allocated memory is not properly freed, resulting in a gradual depletion of system memory.
The impact of this vulnerability may vary depending on the specific system configuration and usage patterns. It could potentially lead to resource exhaustion and system instability.
To fix the vulnerability, users are advised to update their Linux Kernel to version v4.14.233 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
