Memory Leak Vulnerability in fsl_ifc Package
Summary
GSD-2021-1001473: memory: fsl_ifc: fix leak of private memory on probe failure. Affects Kernel versions >= a20cbdeffce247a2b6fb83cd8d22433994068565, < 8018476756066e97ecb886c3dc024aeb7d5792ad. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The fsl_ifc package is a component of the Linux Kernel. It provides support for the Freescale Integrated Flash Controller (IFC) memory interface. The IFC is responsible for connecting the processor to external flash memory devices. The fsl_ifc package is used in various embedded systems and devices that utilize Freescale processors. This vulnerability affects versions of the Linux Kernel from v3.3 to v4.4.275.
Vulnerability Detail
The vulnerability in the fsl_ifc package leads to a memory leak when the probe process fails. This means that if the initialization process of the fsl_ifc module fails, it does not properly release the allocated memory, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition. The vulnerability was introduced in version v3.3 of the Linux Kernel and has been fixed in version v4.4.276.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
In conclusion, the fsl_ifc package in the Linux Kernel is vulnerable to a memory leak issue that can lead to a denial-of-service condition. It is crucial to update the Linux Kernel to version v4.4.276 or later to fix this vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The fsl_ifc package is a component of the Linux Kernel that provides support for the Freescale Integrated Flash Controller (IFC) memory interface.
The vulnerability can lead to a memory leak, potentially causing a denial-of-service condition by exhausting system memory resources.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application or system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, the vulnerability has been fixed in Linux Kernel version v4.4.276. It is recommended to update to this version or a later version to mitigate the vulnerability.
There are no known exploits for this vulnerability at the moment. However, it is still important to apply the recommended fix to prevent any potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
