ext4: Memory Leak in ext4_mb_init_backend on Error Path
Summary
GSD-2021-1000779: ext4: fix memory leak in ext4_mb_init_backend on error path. Affects Kernel versions < 2050c6e5b161e5e25ce3c420fef58b24fa388a49. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4_mb_init_backend function, which can lead to a memory leak on the error path.
Vulnerability Detail
The vulnerability in the ext4_mb_init_backend function can result in a memory leak when an error occurs. This can potentially lead to resource exhaustion and system instability. The issue arises due to a failure to release allocated memory in certain error scenarios. An attacker could potentially exploit this vulnerability to cause a denial-of-service condition or escalate privileges. The vulnerability was fixed in Linux Kernel version v5.10.43 by commit 2050c6e5b161e5e25ce3c420fef58b24fa388a49.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to a memory leak issue in the ext4_mb_init_backend function. This vulnerability can lead to resource exhaustion and system instability. It is recommended to update the Linux Kernel to version v5.10.43 or later to fix this issue. If you need further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel that provides support for the fourth extended file system (ext4). It is widely used in Linux distributions.
The vulnerability can lead to a memory leak, potentially causing resource exhaustion and system instability. It could also be exploited by an attacker to cause a denial-of-service condition or escalate privileges.
The vulnerability was fixed in Linux Kernel version v5.10.43 by commit 2050c6e5b161e5e25ce3c420fef58b24fa388a49.
No, there is no known workaround for this vulnerability. It is necessary to update the Linux Kernel to apply the fix.
For more information about this vulnerability, you can refer to the source link provided in the database specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
