Memory Leak in dmi-sysfs Firmware
Summary
GSD-2022-1002623: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle. Affects Kernel versions >= 948af1f0bbc8526448e8cbe3f8d3bf211bdf5181, < ec752973aa721ee281d5441e497364637c626c7b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmi-sysfs firmware is a component of the Linux Kernel, which is responsible for handling the Desktop Management Interface (DMI) data exposed through the sysfs interface. DMI provides information about the hardware components of a system, such as the manufacturer, model, and serial number. The dmi-sysfs firmware allows users to access and manipulate this information programmatically. However, a memory leak vulnerability has been discovered in the dmi_sysfs_register_handle function.
Vulnerability Detail
The memory leak vulnerability in dmi-sysfs arises from a failure to release allocated memory when registering a new DMI handle. This can lead to a gradual depletion of system memory resources, potentially resulting in performance degradation or even system instability. An attacker could potentially exploit this vulnerability to exhaust system memory and cause a denial-of-service (DoS) condition. The vulnerability was introduced in version v2.6.39 of the Linux Kernel and has been fixed in version v5.18.4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The memory leak vulnerability in the dmi-sysfs firmware can lead to system performance degradation and potential denial-of-service (DoS) conditions. It is crucial to update the Linux Kernel to version v5.18.4 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmi-sysfs firmware is a component of the Linux Kernel that allows users to access and manipulate Desktop Management Interface (DMI) data through the sysfs interface.
The memory leak vulnerability in dmi-sysfs can lead to a gradual depletion of system memory resources, potentially causing performance degradation or system instability. It could also be exploited by an attacker to trigger a denial-of-service (DoS) condition.
The vulnerability was introduced in version v2.6.39 of the Linux Kernel. All subsequent versions up to v5.18.3 are affected. The issue has been fixed in version v5.18.4.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
The fixed version of the Linux Kernel (v5.18.4 or later) can be obtained from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
