Refcount Leak Bug in xtensa: xtfpga Setup
Summary
GSD-2022-1004248: xtensa: xtfpga: Fix refcount leak bug in setup. Affects Kernel versions < 9b30c5c8884eda3f541229899671cebbad15979b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The xtensa: xtfpga is a component in the Linux Kernel that provides support for the Xtensa FPGA platform. It is responsible for configuring and managing the FPGA resources. The vulnerability in the setup function of xtfpga leads to a refcount leak bug. This bug can potentially result in memory leaks and resource exhaustion, impacting the stability and performance of the system.
Vulnerability Detail
The refcount leak bug in the setup function of xtensa: xtfpga allows for a reference count to be leaked, leading to memory leaks and resource exhaustion. This vulnerability can be exploited by an attacker to exhaust system resources, potentially causing denial-of-service conditions. The bug has been fixed in Linux Kernel version v5.18.8 by commit 9b30c5c8884eda3f541229899671cebbad15979b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
Conclusion
The refcount leak bug in xtensa: xtfpga setup can lead to memory leaks and resource exhaustion. It is important to update the Linux Kernel to version v5.18.8 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
xtensa: xtfpga is a component in the Linux Kernel that provides support for the Xtensa FPGA platform. It is responsible for configuring and managing the FPGA resources.
A refcount leak bug occurs when a reference count is not properly managed, leading to memory leaks and resource exhaustion.
This vulnerability can result in memory leaks and resource exhaustion, impacting the stability and performance of the system. It can also be exploited by attackers to cause denial-of-service conditions.
To fix this vulnerability, update the Linux Kernel to version v5.18.8 or later.
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
