Memory Leak Vulnerability in rga_probe in Kernel
Summary
GSD-2022-1002790: media: rga: fix possible memory leak in rga_probe. Affects Kernel versions < 1cdc768468c25d6b10ab83ec1efd4a8554532d69. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software. The rga_probe function in the media subsystem of the Kernel is used to probe and initialize the Rockchip Graphics Accelerator (RGA) hardware. The RGA is responsible for accelerating various media operations, such as image and video processing. However, a vulnerability has been discovered in the rga_probe function that could lead to a memory leak.
Vulnerability Detail
The vulnerability in rga_probe arises from a possible memory leak. When the function is called, it may allocate memory but fail to deallocate it properly under certain conditions. This can result in a gradual depletion of available memory resources, potentially leading to system instability or denial of service. An attacker may be able to exploit this vulnerability to exhaust system memory and cause a system crash or other adverse effects. The vulnerability has been addressed in Linux Kernel version v5.18.3 by commit 1cdc768468c25d6b10ab83ec1efd4a8554532d69.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Kernel to the patched version.
Conclusion
In conclusion, the rga_probe function in the Kernel's media subsystem is vulnerable to a memory leak issue. This vulnerability can be mitigated by updating the Kernel to version v5.18.3 or later. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing system instability or denial of service.
The vulnerability requires local access to the system in order to exploit it.
There are no known instances of this vulnerability being exploited in the wild.
No, a CVSS score has not been provided for this vulnerability.
For more details about this vulnerability, refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.