False Positive kmemleak Report in x86/pm
Summary
GSD-2022-1004018: x86/pm: Fix false positive kmemleak report in msr_build_context(). Affects Kernel versions >= 7a9c2dd08eadd5c6943115dbbec040c38d2e0822, < 2a2b72ac7fb625fd1383b3a784bfd7fba93c7423. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The x86/pm package is a component of the Linux Kernel that handles power management for x86 architecture. It provides functionality for managing power states, including CPU frequency scaling, sleep states, and performance monitoring. The package is critical for optimizing power consumption and performance on x86-based systems.
Vulnerability Detail
The vulnerability in x86/pm is related to a false positive kmemleak report in the msr_build_context() function. This function is responsible for building the context for accessing Model Specific Registers (MSRs) on x86 processors. Due to a coding error, the function may trigger a false positive report from the kernel memory leak detector (kmemleak). This can lead to unnecessary investigation and potential distraction from real memory leak issues. While the impact and attack plausibility have not been proven, it is important to address this issue to maintain the accuracy and effectiveness of memory leak detection.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The false positive kmemleak report vulnerability in x86/pm package can be addressed by updating the Linux Kernel to version v4.14.283 or later. This will ensure the accuracy and effectiveness of memory leak detection. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The x86/pm package is a component of the Linux Kernel that handles power management for x86 architecture.
Kmemleak is a kernel memory leak detector in the Linux Kernel that helps identify memory leaks in the kernel code.
The msr_build_context() function is responsible for building the context for accessing Model Specific Registers (MSRs) on x86 processors.
The false positive kmemleak report can lead to unnecessary investigation and potential distraction from real memory leak issues.
To fix the vulnerability, update the Linux Kernel to version v4.14.283 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
