Memory Leak in dmi-sysfs Firmware
Summary
GSD-2022-1003865: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle. Affects Kernel versions >= 948af1f0bbc8526448e8cbe3f8d3bf211bdf5181, < c66cc3c62870a27ea8f060a7e4c1ad8d26dd3f0d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmi-sysfs firmware is a component of the Linux Kernel, which is responsible for handling the Desktop Management Interface (DMI) data exposed through the sysfs interface. DMI is a standard for describing hardware components of a computer system. The dmi-sysfs firmware provides a way to access and manipulate this information programmatically. It is used by various system utilities and applications to gather hardware details and make decisions based on them.
Vulnerability Detail
The dmi-sysfs firmware has a memory leak vulnerability in the dmi_sysfs_register_handle function. This vulnerability was introduced in version v2.6.39 of the Linux Kernel and is fixed in version v4.19.247. The vulnerability allows an attacker to cause a memory leak by repeatedly registering handles without properly releasing the allocated memory. This can lead to resource exhaustion and potential denial-of-service (DoS) attacks. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The dmi-sysfs firmware in the Linux Kernel has a memory leak vulnerability that can lead to resource exhaustion and potential denial-of-service (DoS) attacks. It is recommended to update the Linux Kernel to version v4.19.247 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmi-sysfs firmware is a component of the Linux Kernel that provides access to the Desktop Management Interface (DMI) data through the sysfs interface.
The vulnerability can lead to a memory leak, resource exhaustion, and potential denial-of-service (DoS) attacks.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability.
Yes, the vulnerability is fixed in Linux Kernel version v4.19.247 or later.
There are no known exploits for this vulnerability at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
