Memory Leak in dmi-sysfs Firmware
Summary
GSD-2022-1004051: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle. Affects Kernel versions >= 948af1f0bbc8526448e8cbe3f8d3bf211bdf5181, < a9bfb37d6ba7c376b0d53337a4c5f5ff324bd725. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The dmi-sysfs firmware is a component of the Linux Kernel, which is responsible for providing access to the Desktop Management Interface (DMI) information through the sysfs filesystem. DMI is a standard interface used by system management software to gather information about hardware components of a computer system. The dmi-sysfs firmware allows users to retrieve and manipulate this information programmatically. However, a memory leak vulnerability has been identified in the dmi_sysfs_register_handle function.
Vulnerability Detail
The memory leak vulnerability in the dmi-sysfs firmware arises from a failure to release allocated memory when registering a new DMI handle. This can result in a gradual depletion of system memory resources, leading to performance degradation or even system instability. An attacker may potentially exploit this vulnerability to exhaust system memory and cause a denial-of-service (DoS) condition. The vulnerability was introduced in version v2.6.39 of the Linux Kernel and has been fixed in version v4.9.318.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can unload the dmi-sysfs module and reload it periodically to release the accumulated memory. This can be done using the following commands:
$ sudo rmmod dmi-sysfs $ sudo modprobe dmi-sysfs
Conclusion
The memory leak vulnerability in the dmi-sysfs firmware can have significant implications for system performance and stability. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The dmi-sysfs firmware is a component of the Linux Kernel that provides access to the Desktop Management Interface (DMI) information through the sysfs filesystem.
The memory leak vulnerability in the dmi-sysfs firmware can lead to a gradual depletion of system memory resources, potentially causing performance degradation or system instability. It may also be exploited by attackers to trigger a denial-of-service (DoS) condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.9.318 or later. Instructions for updating the Kernel can be found in the official repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/).
Yes, a temporary workaround is to unload and reload the dmi-sysfs module periodically. This can be done using the 'rmmod' and 'modprobe' commands as mentioned in the workaround section.
Yes, the memory leak vulnerability in the dmi-sysfs firmware has been fixed in Linux Kernel version v4.9.318.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
