Memory Leak in drm/nouveau/debugfs in Kernel

Kernel Updated 02 Oct 2025

Summary

19/10/2021

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2021-1001580: drm/nouveau/debugfs: fix file release memory leak. Affects Kernel versions >= 6e9fc177399f08446293fec7607913fdbc95e191, < 11cd944bb87d9e575b94c07c952105eda745b459. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. The drm/nouveau/debugfs module within the Kernel provides debugging and diagnostic capabilities for the Nouveau graphics driver. It exposes a virtual file system that allows users to interact with the driver and retrieve information about the GPU and its state. However, a memory leak vulnerability has been identified in the file release mechanism of the debugfs module.

Vulnerability Detail

The memory leak vulnerability in drm/nouveau/debugfs occurs when a file is released without properly freeing the associated memory. This can lead to a gradual depletion of system memory over time, potentially resulting in performance degradation or even system instability. An attacker with local access to the system may be able to exploit this vulnerability to exhaust available memory resources, causing denial-of-service conditions or facilitating other types of attacks.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.153 or later. The fix for this issue was implemented in commit 11cd944bb87d9e575b94c07c952105eda745b459. Users can obtain the updated Kernel from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/. Once the updated Kernel is installed, the memory leak vulnerability in drm/nouveau/debugfs will be addressed.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Conclusion

The memory leak vulnerability in drm/nouveau/debugfs can be mitigated by updating the Linux Kernel to version v5.4.153 or later. This update addresses the issue and prevents potential memory depletion and associated risks. For further assistance or support in addressing this vulnerability, please contact DevNack.com.

See every vulnerability recorded for Kernel →