Memory Leak in Error Handling Path in tty: serial: 8250: serial_cs
Summary
GSD-2021-1001202: tty: serial: 8250: serial_cs: Fix a memory leak in error handling path. Affects Kernel versions < b2ef1f5de40342de44fc5355321595f91774dab5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tty: serial: 8250: serial_cs package is a component of the Linux Kernel that provides support for serial communication over the 8250 UART controller. It allows devices to communicate with each other using a serial interface. This vulnerability in the package can lead to a memory leak in the error handling path.
Vulnerability Detail
The vulnerability in tty: serial: 8250: serial_cs arises from a memory leak in the error handling path. When an error occurs during the execution of the code, memory resources are not properly released, resulting in a memory leak. This can lead to a gradual depletion of available memory, potentially causing system instability or denial of service. The vulnerability has been identified and fixed in Linux Kernel version v5.13.4 by commit b2ef1f5de40342de44fc5355321595f91774dab5.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
In conclusion, the vulnerability in tty: serial: 8250: serial_cs can lead to a memory leak in the error handling path. It is recommended to update the Linux Kernel to version v5.13.4 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
tty: serial: 8250: serial_cs is a component of the Linux Kernel that provides support for serial communication over the 8250 UART controller. It allows devices to communicate with each other using a serial interface.
A memory leak is a situation where allocated memory is not properly deallocated or released, leading to a gradual depletion of available memory resources. This can result in system instability or denial of service.
The memory leak caused by this vulnerability can lead to a gradual depletion of available memory, potentially causing system instability or denial of service.
Yes, this vulnerability has been fixed in Linux Kernel version v5.13.4 by commit b2ef1f5de40342de44fc5355321595f91774dab5.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.13.4 or later. This can be done by downloading the updated kernel source code from the official Linux Kernel repository and compiling it according to the provided instructions.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
