Memory Leak in ACPI: scan
Summary
GSD-2021-1000477: ACPI: scan: Fix a memory leak in an error handling path. Affects Kernel versions >= e5cdbe419004e172f642e876a671a9ff1c52f8bb, < 6901a4f795e0e8d65ae779cb37fc22e0bf294712. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ACPI (Advanced Configuration and Power Interface) is an open standard for power management and configuration of computer hardware. It provides a platform-independent interface for hardware discovery, configuration, and power management. The ACPI scan function is responsible for scanning the ACPI namespace and creating device objects. This vulnerability in the ACPI scan function leads to a memory leak in an error handling path.
Vulnerability Detail
The vulnerability occurs in the ACPI scan function when handling errors. Due to improper memory management, a memory leak can occur, leading to the exhaustion of system resources over time. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition by repeatedly triggering the error path and consuming excessive memory. The impact of this vulnerability may vary depending on the system's available resources and the attacker's ability to trigger the error path.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The vulnerability in the ACPI scan function could lead to a memory leak and potential denial-of-service (DoS) attacks. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ACPI (Advanced Configuration and Power Interface) is an open standard for power management and configuration of computer hardware.
The ACPI scan function is responsible for scanning the ACPI namespace and creating device objects.
A memory leak occurs when a program fails to release memory that is no longer needed, leading to the gradual exhaustion of system resources.
The impact of this vulnerability may vary depending on the system's available resources and the attacker's ability to trigger the error path. It could potentially lead to a denial-of-service (DoS) condition.
To fix this vulnerability, users should update their Linux Kernel to version v4.9.269 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
