Memory Leak in dmi-sysfs in Linux Kernel
Summary
GSD-2022-1003542: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle. Affects Kernel versions >= 948af1f0bbc8526448e8cbe3f8d3bf211bdf5181, < 985706bd3bbeffc8737bc05965ca8d24837bc7db. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The dmi-sysfs component in the Linux Kernel is responsible for exposing the Desktop Management Interface (DMI) information through the sysfs filesystem. DMI provides details about the system's hardware components, such as the motherboard, BIOS, and peripherals. However, a memory leak vulnerability has been identified in the dmi-sysfs module.
Vulnerability Detail
The memory leak vulnerability in dmi-sysfs arises from a flaw in the dmi_sysfs_register_handle function. This function is responsible for registering a DMI handle in the sysfs filesystem. However, due to an oversight, the function fails to release allocated memory when an error occurs during the registration process. As a result, memory resources are not properly freed, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, causing a denial-of-service condition or other adverse effects. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest stable version.
Conclusion
The memory leak vulnerability in dmi-sysfs in the Linux Kernel has been addressed in the latest stable version. Users are advised to update their Linux Kernel to ensure system security and stability. For further support or assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmi-sysfs component in the Linux Kernel is responsible for exposing the Desktop Management Interface (DMI) information through the sysfs filesystem. DMI provides details about the system's hardware components, such as the motherboard, BIOS, and peripherals.
A memory leak vulnerability occurs when a program or system fails to release allocated memory after it is no longer needed. This can lead to a gradual depletion of available memory resources, potentially causing performance degradation or system instability.
The memory leak vulnerability in dmi-sysfs could potentially lead to a denial-of-service condition by exhausting system memory resources. It may also result in performance degradation or other adverse effects.
There is no evidence or reports of this vulnerability being exploited in the wild. However, it is important to apply the fix to ensure system security and stability.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository. The latest stable version, which includes the fix for this vulnerability, can be found at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
