Memory Leak Vulnerability in nilfs2
Summary
GSD-2021-1001106: nilfs2: fix memory leak in nilfs_sysfs_delete_device_group. Affects Kernel versions >= da7141fb78db915680616e15677539fc8140cf53, < 49e3def271f65f893ca37158d902ad168838bcaf. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nilfs2 package is a file system implementation for the Linux kernel. It provides a log-structured file system that allows for efficient snapshotting and recovery. The package is widely used in Linux distributions and is an integral part of the kernel.
Vulnerability Detail
The vulnerability identified as GSD-2021-1001106 in the nilfs2 package is a memory leak issue in the nilfs_sysfs_delete_device_group function. This vulnerability was introduced in version v3.17 of the Linux kernel and affects all subsequent versions until v4.14.238. The vulnerability allows an attacker to cause a memory leak by repeatedly deleting device groups in the sysfs interface of the nilfs2 file system. This can lead to resource exhaustion and potential denial-of-service attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux kernel to a patched version.
Conclusion
The memory leak vulnerability in nilfs2 can be mitigated by updating the Linux kernel to version v4.14.238 or later. It is crucial to apply the fix to prevent potential resource exhaustion and denial-of-service attacks. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nilfs2 is a file system implementation for the Linux kernel that provides a log-structured file system with snapshotting and recovery capabilities.
The vulnerability can be exploited to cause a memory leak, leading to resource exhaustion and potential denial-of-service attacks.
The vulnerability affects versions of the Linux kernel from v3.17 to v4.14.238.
No, there is no known workaround for this vulnerability. Updating the Linux kernel to a patched version is necessary.
Users can obtain the fixed version of the Linux kernel from the official Linux kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
