ext4: Memory Leak in ext4_mb_init_backend on Error Path
Summary
GSD-2021-1000814: ext4: fix memory leak in ext4_mb_init_backend on error path. Affects Kernel versions < 04fb2baa0b147f51db065a1b13a11954abe592d0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system implementation in the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4_mb_init_backend function is responsible for initializing the ext4 file system's block group allocation bitmap. However, a memory leak vulnerability exists in this function on the error path, which can lead to resource exhaustion and potential denial of service attacks.
Vulnerability Detail
The ext4_mb_init_backend function in the ext4 package suffers from a memory leak vulnerability. When an error occurs during the initialization of the block group allocation bitmap, the function fails to release the allocated memory, resulting in a memory leak. An attacker could exploit this vulnerability by repeatedly triggering the error path, causing the system to exhaust available memory resources. This could lead to a denial of service condition, impacting the availability of the affected system. The vulnerability was fixed in Linux Kernel version v5.12.10 by commit 04fb2baa0b147f51db065a1b13a11954abe592d0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix provided in the Linux Kernel update.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to a memory leak in the ext4_mb_init_backend function. This vulnerability can be exploited to exhaust system resources and potentially lead to denial of service attacks. It is crucial to update the Linux Kernel to version v5.12.10 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system implementation in the Linux Kernel, providing support for the fourth extended file system (ext4). It is widely used in Linux distributions.
ext4_mb_init_backend is a function in the ext4 package responsible for initializing the ext4 file system's block group allocation bitmap.
This vulnerability can lead to a memory leak, potentially causing resource exhaustion and denial of service attacks.
To fix this vulnerability, update the Linux Kernel to version v5.12.10 or later.
There is no known workaround for this vulnerability. Applying the fix in the Linux Kernel update is recommended.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
