Refcount Leak in realview_gic_of_init in Kernel
Summary
GSD-2022-1004499: irqchip/gic/realview: Fix refcount leak in realview_gic_of_init. Affects Kernel versions >= 82b0a434b436f5da69ddd24bd6a6fa5dc4484310, < 5d38720661a4b9c87705c206a6081177ffb8ec1d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that manages core system functions, such as memory management, process scheduling, and device drivers. It provides an interface between the hardware and software layers, allowing applications to interact with the underlying system resources. The realview_gic_of_init function in the irqchip/gic/realview module is responsible for initializing the Generic Interrupt Controller (GIC) on ARM-based RealView platforms. The GIC handles interrupt requests from various hardware devices and distributes them to the appropriate processors. This vulnerability in realview_gic_of_init can lead to a refcount leak, potentially causing resource exhaustion and system instability.
Vulnerability Detail
The vulnerability in realview_gic_of_init arises from a refcount leak. When initializing the GIC, the function fails to properly release resources in certain error scenarios, leading to a refcount imbalance. This can result in a gradual depletion of system resources, such as memory or other critical components, and may eventually lead to system instability or denial of service. An attacker with local access to the affected system could potentially exploit this vulnerability to exhaust system resources and disrupt normal operations.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.49 or later. The fix for this issue was implemented in commit 5d38720661a4b9c87705c206a6081177ffb8ec1d. Updating the Kernel ensures that the refcount leak in realview_gic_of_init is properly addressed and mitigates the risk of resource exhaustion or system instability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The refcount leak vulnerability in realview_gic_of_init can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.15.49 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to resource exhaustion and system instability, potentially resulting in denial of service or disruption of normal operations.
An attacker with local access to the affected system could exploit this vulnerability to exhaust system resources, causing instability or denial of service.
No, this vulnerability requires local access to the affected system to be exploited.
Yes, this vulnerability has been fixed in Linux Kernel version v5.15.49 by commit 5d38720661a4b9c87705c206a6081177ffb8ec1d.
Yes, this vulnerability was introduced in version v4.6 of the Linux Kernel by commit 82b0a434b436f5da69ddd24bd6a6fa5dc4484310.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.