Refcount Leak in realview_gic_of_init in Kernel
Summary
GSD-2022-1004760: irqchip/gic/realview: Fix refcount leak in realview_gic_of_init. Affects Kernel versions >= 82b0a434b436f5da69ddd24bd6a6fa5dc4484310, < 56526c3883fc7a1f5898b1d40a02c8b8685a5d92. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functionalities such as process management, memory management, and device drivers. The realview_gic_of_init function in the irqchip/gic/realview module is responsible for initializing the Generic Interrupt Controller (GIC) on ARM-based RealView platforms. The GIC handles interrupt requests from various hardware devices and distributes them to the appropriate processors. This vulnerability in realview_gic_of_init can lead to a refcount leak, potentially causing resource exhaustion and system instability.
Vulnerability Detail
The vulnerability in realview_gic_of_init arises from a refcount leak. When initializing the GIC, the function fails to properly release resources in certain error paths, leading to a refcount imbalance. This can result in a gradual depletion of system resources, potentially leading to a denial-of-service condition or other system instability. An attacker with local access to the affected system may be able to exploit this vulnerability to degrade system performance or disrupt normal operation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Conclusion
The refcount leak vulnerability in realview_gic_of_init in the Kernel can lead to resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.4.200 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to a gradual depletion of system resources, potentially causing a denial-of-service condition or system instability.
An attacker with local access to the affected system may be able to exploit this vulnerability to degrade system performance or disrupt normal operation.
No, this vulnerability requires local access to the affected system.
Yes, this vulnerability has been fixed in Linux Kernel version v5.4.200 by commit 56526c3883fc7a1f5898b1d40a02c8b8685a5d92.
There are no known instances of this vulnerability being exploited in the wild.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
