Memory Leak Vulnerability in Samsung Exynos5422-DMC
Summary
GSD-2022-1004242: memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings. Affects Kernel versions >= 6e7674c3c6df565ab47d02b4f2e608e3477cdf86, < bb2a481778c60f912c363e271ae46b55ff8132db. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Samsung Exynos5422-DMC is a memory controller used in Samsung's Exynos 5422 system-on-chip (SoC). It is responsible for managing the dynamic random-access memory (DRAM) timings and configurations. The vulnerability in question is a memory leak issue that occurs in the 'of_get_dram_timings' function of the Exynos5422-DMC driver.
Vulnerability Detail
The vulnerability in the Exynos5422-DMC driver leads to a reference count leak in the 'of_get_dram_timings' function. This can result in a memory leak, where allocated memory is not properly released, leading to potential resource exhaustion. An attacker could potentially exploit this vulnerability to exhaust system memory, causing denial-of-service conditions or other unpredictable behavior. The vulnerability was introduced in Linux Kernel version v5.5 and has been fixed in version v5.18.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by ensuring they are running an updated version of the Linux Kernel that includes the fix.
Conclusion
The memory leak vulnerability in the Samsung Exynos5422-DMC driver can lead to resource exhaustion and unpredictable system behavior. It is recommended to update the Linux Kernel to version v5.18.8 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing resource exhaustion and unpredictable system behavior.
An attacker could exploit this vulnerability to exhaust system memory, leading to denial-of-service conditions or other unpredictable behavior.
The vulnerability was introduced in Linux Kernel version v5.5 and is fixed in version v5.18.8.
There is no specific workaround provided, but users can mitigate the risk by updating to the fixed version of the Linux Kernel.
For more details about this vulnerability, you can refer to the vulnerability ID GSD-2022-1004242 in the GSD Database maintained by the Cloud Security Alliance.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
