Memory Leak in net: caif: ldisc_open
Summary
GSD-2021-1001094: net: caif: fix memory leak in ldisc_open. Affects Kernel versions < dede006783102f26a49e9eb33fd673b2937ed692. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net: caif package is a component of the Linux Kernel that provides support for the CAIF (Common Air Interface Framework) protocol. CAIF is a communication protocol used in mobile devices for wireless connectivity. The ldisc_open function in the caif_netdev.c file is responsible for opening a line discipline for a CAIF network device. This line discipline is used to handle incoming data and perform necessary operations. However, a memory leak vulnerability has been identified in the ldisc_open function.
Vulnerability Detail
The memory leak vulnerability in the ldisc_open function of net: caif can be exploited by an attacker to exhaust system memory resources. When a CAIF network device is opened, the ldisc_open function allocates memory for the line discipline structure. However, if an error occurs during the allocation process, the function fails to free the previously allocated memory, resulting in a memory leak. This can be abused by an attacker to repeatedly open and close CAIF network devices, eventually causing the system to run out of memory. This could lead to a denial-of-service (DoS) condition, impacting the availability of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid the memory leak by refraining from opening and closing CAIF network devices excessively. However, this workaround may not be practical in all scenarios and it is strongly advised to apply the official fix by updating the Linux Kernel.
Conclusion
The memory leak vulnerability in the ldisc_open function of net: caif can be mitigated by updating the Linux Kernel to the patched version. It is crucial to apply the fix to prevent potential denial-of-service (DoS) attacks. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Net: caif is a component of the Linux Kernel that provides support for the CAIF (Common Air Interface Framework) protocol used in mobile devices for wireless connectivity.
The memory leak vulnerability in the ldisc_open function can be exploited to exhaust system memory resources, leading to a denial-of-service (DoS) condition.
To fix this vulnerability, update the Linux Kernel to version v4.4.274 or later, which includes the necessary patch.
A workaround is to avoid excessive opening and closing of CAIF network devices. However, it is recommended to apply the official fix by updating the Linux Kernel.
For more information, refer to the provided references link and the source link in the database specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
