Memory Leak in net: caif: ldisc_open
Summary
GSD-2021-1001105: net: caif: fix memory leak in ldisc_open. Affects Kernel versions < 8afbbbbca1f02f925f128f7d7801dbfc84eaaf14. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net package in the Linux Kernel is responsible for handling network-related operations. It provides various protocols and interfaces for communication. One of the components in this package is caif, which stands for Common API for Interfacing with the Fabric. The caif module allows communication between different network interfaces. However, a vulnerability has been discovered in the ldisc_open function of the caif module, which can lead to a memory leak.
Vulnerability Detail
The vulnerability in the ldisc_open function of the caif module in the net package can result in a memory leak. When this function is called, it fails to release allocated memory under certain conditions, leading to a gradual accumulation of memory over time. This can eventually exhaust the available memory resources, causing system instability or denial of service. The vulnerability has been fixed in Linux Kernel version v4.14.238 by commit 8afbbbbca1f02f925f128f7d7801dbfc84eaaf14.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The memory leak vulnerability in the net: caif: ldisc_open function can lead to system instability or denial of service. It is crucial to update the Linux Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net package in the Linux Kernel is responsible for handling network-related operations and provides protocols and interfaces for communication.
Caif stands for Common API for Interfacing with the Fabric. It is a module in the net package that enables communication between different network interfaces.
The ldisc_open function is a part of the caif module in the net package. It is responsible for opening a line discipline for a communication interface.
A memory leak occurs when allocated memory is not properly released, leading to a gradual accumulation of memory over time. This can result in resource exhaustion and system instability.
To fix the memory leak vulnerability, update the Linux Kernel to version v4.14.238 or later. Alternatively, wait for your Linux distribution to release an updated kernel package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
