Memory Leak in nilfs_sysfs_delete_device_group in nilfs2
Summary
GSD-2021-1001126: nilfs2: fix memory leak in nilfs_sysfs_delete_device_group. Affects Kernel versions >= da7141fb78db915680616e15677539fc8140cf53, < ab5bef9780386be0e54f98a40eeedb8295cd450b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The nilfs2 package is a file system implemented in the Linux Kernel. It provides support for the NILFS (New Implementation of a Log-structured File System) file system, which is designed for flash memory-based storage devices. The package allows users to create and manage NILFS file systems on their Linux systems. However, a vulnerability has been discovered in the nilfs_sysfs_delete_device_group function, which can lead to a memory leak.
Vulnerability Detail
The vulnerability in nilfs_sysfs_delete_device_group function was introduced in version v3.17 of the Linux Kernel by commit da7141fb78db915680616e15677539fc8140cf53. It was fixed in version v5.10.47 by commit ab5bef9780386be0e54f98a40eeedb8295cd450b. The vulnerability causes a memory leak, which can result in the exhaustion of system resources over time. An attacker could potentially exploit this vulnerability to cause a denial-of-service condition on a vulnerable system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The memory leak vulnerability in nilfs_sysfs_delete_device_group in the nilfs2 package can be fixed by updating the Linux Kernel to version v5.10.47 or later. It is recommended to apply the fix as soon as possible to prevent potential denial-of-service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nilfs2 is a file system implemented in the Linux Kernel that provides support for the NILFS file system, designed for flash memory-based storage devices.
The vulnerability can lead to a memory leak, potentially causing a denial-of-service condition on a vulnerable system.
To fix this vulnerability, update your Linux Kernel to version v5.10.47 or later.
There is no known workaround. It is recommended to update the Linux Kernel to the latest version.
For more information, refer to the vulnerability details in the Open Source Vulnerability database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001126.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
