Vulnerability in drm/ttm: fix memleak in ttm_transfered_destroy
Summary
GSD-2021-1002127: drm/ttm: fix memleak in ttm_transfered_destroy. Affects Kernel versions < 132a3d998d6753047f22152731fba2b0d6b463dd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drm/ttm package is a component of the Linux Kernel that provides memory management for graphics devices. It is responsible for allocating and managing memory resources used by the graphics subsystem. The ttm_transfered_destroy function within the package is vulnerable to a memory leak issue.
Vulnerability Detail
The vulnerability in drm/ttm's ttm_transfered_destroy function can lead to a memory leak. When this function is called, it fails to properly release allocated memory, resulting in a gradual accumulation of unreleased memory over time. This can eventually lead to resource exhaustion and system instability. The vulnerability has been addressed in Linux Kernel version v5.14.16 by commit 132a3d998d6753047f22152731fba2b0d6b463dd.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The vulnerability in drm/ttm's ttm_transfered_destroy function can lead to a memory leak, potentially causing resource exhaustion and system instability. It is crucial to update the Linux Kernel to version v5.14.16 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in a memory leak, leading to resource exhaustion and potential system instability.
The details of any potential remote exploitation have not been provided. However, it is recommended to apply the fix as soon as possible to mitigate any potential risks.
There is no information available regarding any known instances of this vulnerability being actively exploited.
The recommended solution is to update the Linux Kernel to the fixed version. There is no alternative mitigation mentioned for this vulnerability.
For more details about this vulnerability, you can refer to the source link provided in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
