Memory Leak Vulnerability in nfs Package
Summary
GSD-2021-1001265: nfs: fix acl memory leak of posix_acl_create(). Affects Kernel versions >= 013cdf1088d7235da9477a2375654921d9b9ba9f, < 4b515308ab875c7e8ada8e606fe0c64762da5ed4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfs package is a component of the Linux Kernel ecosystem. It provides support for the Network File System (NFS) protocol, allowing remote file access and sharing. NFS enables clients to mount remote file systems and interact with them as if they were local. This vulnerability affects the nfs package in the Linux Kernel.
Vulnerability Detail
The identified vulnerability in the nfs package is a memory leak issue related to the posix_acl_create() function. When creating an access control list (ACL), the function fails to release allocated memory, leading to a memory leak. This vulnerability can be exploited by an attacker to exhaust system memory resources, potentially causing denial-of-service conditions or other adverse effects.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid using ACLs in the nfs package until the Kernel is updated. By refraining from creating ACLs, the memory leak issue can be mitigated. However, it is still advisable to update the Kernel as soon as possible to address the vulnerability completely.
Conclusion
In conclusion, the nfs package in the Linux Kernel is vulnerable to a memory leak issue in the posix_acl_create() function. This vulnerability can be mitigated by updating the Kernel to version v5.10.52 or later. Users can also avoid using ACLs as a temporary workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The nfs package is a component of the Linux Kernel ecosystem that provides support for the Network File System (NFS) protocol, enabling remote file access and sharing.
A memory leak occurs when a program fails to release allocated memory after it is no longer needed. This can lead to a gradual depletion of available memory resources, potentially causing performance issues or system instability.
The posix_acl_create() function is a function in the nfs package that is responsible for creating access control lists (ACLs) based on the POSIX standard. ACLs define permissions and access rights for files and directories.
The memory leak vulnerability in the nfs package can result in the exhaustion of system memory resources. This can lead to denial-of-service conditions, performance degradation, or other adverse effects on the affected system.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
