Refcount Leak in irqchip/gic-v3
Summary
GSD-2022-1004647: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions. Affects Kernel versions >= e3825ba1af3a27d7522c9f5f929f5a13b8b138ae, < 506a88a5bf261d76a5214c0338a320f2214c67ac. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt handling for ARM-based systems. It provides support for the Generic Interrupt Controller (GIC) version 3, which is commonly used in ARM-based devices. The GIC is responsible for managing and distributing interrupts to the appropriate processors or cores. This vulnerability, identified as GSD-2022-1004647, refers to a refcount leak in the gic_populate_ppi_partitions function of irqchip/gic-v3.
Vulnerability Detail
The refcount leak vulnerability in gic_populate_ppi_partitions can lead to a resource leak, potentially resulting in a denial-of-service (DoS) condition. The issue arises when the function fails to properly release the reference count on certain partitions, causing a memory leak. An attacker could potentially exploit this vulnerability to exhaust system resources, leading to system instability or crashes. The vulnerability was introduced in version 4.7 of the Linux Kernel and has been fixed in version 5.10.124.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to update the Linux Kernel to the fixed version.
Conclusion
The refcount leak vulnerability in irqchip/gic-v3 can lead to a resource leak and potential denial-of-service conditions. It is crucial to update the Linux Kernel to version 5.10.124 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt handling for ARM-based systems. It provides support for the Generic Interrupt Controller (GIC) version 3.
The vulnerability can lead to a resource leak, potentially resulting in a denial-of-service (DoS) condition. An attacker could exploit this to exhaust system resources, leading to system instability or crashes.
To fix this vulnerability, update the Linux Kernel to version 5.10.124 or later, which includes the necessary patch.
There is no specific workaround mentioned for this vulnerability. Updating the Kernel to the fixed version is the recommended approach.
The vulnerability was introduced in version 4.7 of the Linux Kernel and fixed in version 5.10.124.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
