Memory Leak in netlbl_cipsov4_add_std in Kernel
Summary
GSD-2021-1000915: net: ipv4: fix memory leak in netlbl_cipsov4_add_std. Affects Kernel versions >= 96cb8e3313c7a12e026c1ed510522ae6f6023875, < 398a24447eb60f060c8994221cb5ae6caf355fa1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The netlbl_cipsov4_add_std function in the IPv4 networking subsystem of the Kernel is responsible for adding a standard CIPSOv4 label to a network label database. This feature is used for network security and access control purposes. However, a memory leak vulnerability has been identified in this function, which can lead to the exhaustion of system memory resources over time.
Vulnerability Detail
The memory leak vulnerability in netlbl_cipsov4_add_std allows an attacker to repeatedly add CIPSOv4 labels to the network label database without releasing the associated memory. This can result in a gradual depletion of available memory, leading to system instability or even denial of service conditions. The vulnerability was introduced in version v2.6.19 of the Kernel and has been present until version v5.4.128. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.128 or later. This version includes a commit (398a24447eb60f060c8994221cb5ae6caf355fa1) that addresses the memory leak issue in netlbl_cipsov4_add_std. Users can obtain the updated Kernel from the official Linux Kernel repository: Linux Kernel Repository
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, the memory leak vulnerability in netlbl_cipsov4_add_std in the Kernel can lead to the gradual depletion of system memory resources. It is crucial to update the Linux Kernel to version v5.4.128 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The memory leak vulnerability in netlbl_cipsov4_add_std can lead to the gradual exhaustion of system memory resources, potentially causing system instability or denial of service conditions.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
No known exploit for this vulnerability has been reported at this time.
The recommended mitigation is to update the Linux Kernel to version v5.4.128 or later, which includes the fix for this vulnerability.
The discovery of this vulnerability was automated and reported by the Cloud Security Alliance's GSD Database.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.