Memory Leak Vulnerability in drm/nouveau/kms/nv50
Summary
GSD-2021-1001688: drm/nouveau/kms/nv50-: fix file release memory leak. Affects Kernel versions >= 12885ecbfe62df4358d452080d3b8feef54ec8cb, < 0b4e9fc14973a94ac0520f19b3633493ae13c912. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/nouveau/kms/nv50 package is a component of the Linux Kernel. It provides support for the NVIDIA NV50 series of graphics cards. The package enables kernel mode setting (KMS) for these cards, allowing for better display management and improved performance. However, a memory leak vulnerability has been discovered in the package, which could lead to resource exhaustion and potential system instability.
Vulnerability Detail
The memory leak vulnerability in drm/nouveau/kms/nv50 occurs when releasing a file. Due to a coding error, memory allocated during file operations is not properly freed, resulting in a continuous accumulation of memory over time. This can eventually exhaust available system resources and cause performance degradation or system crashes. An attacker with local access to the affected system may be able to exploit this vulnerability to launch denial-of-service attacks or gain elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a temporary workaround can be implemented by restarting the affected system periodically to release accumulated memory. However, this is not a permanent solution and may only mitigate the issue temporarily. It is strongly advised to apply the official fix by updating the kernel as soon as possible.
Conclusion
The memory leak vulnerability in drm/nouveau/kms/nv50 can have serious consequences for system performance and stability. It is crucial to update the Linux Kernel to version v5.14.12 or later to address this issue. Restarting the system periodically can serve as a temporary workaround, but it is not a permanent solution. For further assistance and support in remediation efforts, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The memory leak vulnerability in drm/nouveau/kms/nv50 can lead to resource exhaustion and potential system instability. It may cause performance degradation or system crashes, impacting the availability and reliability of the affected system.
No, this vulnerability requires local access to the affected system in order to be exploited.
There are no known instances of this vulnerability being exploited in the wild at this time.
It is recommended to apply the fix as soon as possible to ensure the security and stability of the affected system.
For more details about this vulnerability, including technical specifics and the fix implementation, please refer to the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
