Revert "evm: Fix memleak in init_desc" - Vulnerability in Kernel
Summary
GSD-2022-1004702: Revert "evm: Fix memleak in init_desc". Affects Kernel versions < 31e99fa969fd67d77ea92c5527c9cf1c85faa589. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities such as device drivers, memory management, process management, and file system access. The vulnerability in question affects the Kernel and specifically relates to a memory leak issue in the 'init_desc' function of the 'evm' module.
Vulnerability Detail
The identified vulnerability is a memory leak in the 'init_desc' function of the 'evm' module in the Kernel. This issue could potentially lead to a depletion of system memory resources, causing performance degradation or even system instability. The vulnerability was discovered and fixed in Linux Kernel version v5.4.207 by commit 31e99fa969fd67d77ea92c5527c9cf1c85faa589.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the identified vulnerability in the Kernel relates to a memory leak issue in the 'evm' module. It is recommended to update the Kernel to version v5.4.207 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could result in a memory leak, leading to potential performance degradation or system instability.
The information provided does not indicate whether the vulnerability is exploitable remotely. Further analysis may be required to determine the exploitability.
The vulnerability is present in versions prior to Linux Kernel v5.4.207.
Yes, the vulnerability has been fixed in Linux Kernel version v5.4.207 by commit 31e99fa969fd67d77ea92c5527c9cf1c85faa589.
You can find more information about this vulnerability in the source database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1004xxx/GSD-2022-1004702.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
