Memory Leak in net: mdiobus_register
Summary
GSD-2021-1001800: net: mdiobus: Fix memory leak in __mdiobus_register. Affects Kernel versions < a9831afa2dc8a18205403907c41aa4e0950ac611. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net package in the Linux Kernel provides networking functionality, including support for various protocols and interfaces. The mdiobus component within the net package is responsible for managing the Media Independent Interface (MII) bus, which is used for communication between Ethernet PHYs and network devices. The __mdiobus_register function in mdiobus is vulnerable to a memory leak issue.
Vulnerability Detail
The vulnerability in __mdiobus_register function in mdiobus can lead to a memory leak. This occurs when the function fails to release allocated memory in certain error scenarios. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial of service (DoS) condition. The impact of this vulnerability depends on the specific context in which the mdiobus component is used.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel to the patched version.
Conclusion
The memory leak vulnerability in __mdiobus_register function in mdiobus can be mitigated by updating the Linux Kernel to version v4.19.214 or later. This update includes the necessary fix to prevent memory leaks and potential denial of service (DoS) conditions. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net package in the Linux Kernel provides networking functionality, including support for various protocols and interfaces.
mdiobus is a component within the net package that manages the Media Independent Interface (MII) bus, used for communication between Ethernet PHYs and network devices.
__mdiobus_register is a function in mdiobus that is responsible for registering the MII bus with the kernel.
The impact of this vulnerability depends on the specific context in which the mdiobus component is used. It could potentially lead to a denial of service (DoS) condition by exhausting system memory resources.
To fix this vulnerability, update the Linux Kernel to version v4.19.214 or later, which includes the necessary patch.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
