Memory Leak Vulnerability in misc/uss720
Summary
GSD-2021-1000642: misc/uss720: fix memory leak in uss720_probe. Affects Kernel versions >= 0f36163d3abefbda1b21a330b3fdf3c2dc076d94, < 36b5ff1db1a4ef4fdbc2bae364344279f033ad88. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The misc/uss720 package is a component of the Linux Kernel, which is responsible for handling the USS720 USB device. This device is commonly used for communication purposes. The package provides the necessary drivers and functionality to enable the proper functioning of the USS720 device. However, a vulnerability has been discovered in the package that can lead to a memory leak.
Vulnerability Detail
The vulnerability in misc/uss720 is caused by a memory leak in the uss720_probe function. When this function is executed, it fails to release allocated memory, resulting in a memory leak. This can lead to a gradual depletion of available memory resources, potentially causing system instability or denial of service. The vulnerability was introduced in version v2.6.14 of the Linux Kernel and has been fixed in version v5.4.124.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can unload the misc/uss720 module and reload it periodically to free up the leaked memory. This can be achieved by executing the following commands:
rmmod uss720
modprobe uss720
However, it is important to note that this is only a temporary solution and updating to the fixed version of the Linux Kernel is strongly recommended.
Conclusion
The memory leak vulnerability in misc/uss720 can have serious consequences for system stability and performance. It is crucial to update the Linux Kernel to version v5.4.124 or later to fix this vulnerability. In the meantime, users can apply the temporary workaround of unloading and reloading the misc/uss720 module periodically to mitigate the impact. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The memory leak vulnerability in misc/uss720 can lead to a gradual depletion of available memory resources, potentially causing system instability or denial of service.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this memory leak vulnerability in misc/uss720.
Yes, a patch for this vulnerability is available in version v5.4.124 of the Linux Kernel. It is recommended to update to this version or later to fix the memory leak issue in misc/uss720.
Yes, as a temporary workaround, you can unload and reload the misc/uss720 module periodically to free up the leaked memory. However, updating to the fixed version of the Linux Kernel is the recommended solution.
You can find more information about this vulnerability in the GSD-2021-1000642 entry of the GSD Database maintained by the Cloud Security Alliance. Here is the link to the entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000642.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
