kunit: Fix Reference Count Leak in kfree_at_end
Summary
GSD-2021-1002184: kunit: fix reference count leak in kfree_at_end. Affects Kernel versions < f62314b1ced25c58b86e044fc951cd6a1ea234cf. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kunit vulnerability affects the Linux Kernel package. The Linux Kernel is the core component of the Linux operating system and provides essential functionality for the system's operation. It manages system resources, facilitates communication between hardware and software components, and enforces security measures. The kfree_at_end function in the kunit module is responsible for freeing memory allocated during test execution. However, due to a reference count leak, memory may not be properly deallocated, leading to potential resource exhaustion and instability.
Vulnerability Detail
The vulnerability in kunit arises from a reference count leak in the kfree_at_end function. When memory is allocated during test execution, the reference count should be properly managed to ensure that memory is deallocated when no longer needed. However, due to the reference count leak, memory may not be freed, leading to potential memory leaks and resource exhaustion. Attackers could potentially exploit this vulnerability to exhaust system resources, causing denial-of-service conditions or even arbitrary code execution. The vulnerability has been fixed in Linux Kernel version v5.15 by commit f62314b1ced25c58b86e044fc951cd6a1ea234cf.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The kunit vulnerability in the Linux Kernel package has been identified and fixed in version v5.15. It is crucial to update the package to ensure the system is protected against potential resource exhaustion and instability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially lead to resource exhaustion, memory leaks, and instability in the system. Attackers may exploit this vulnerability to cause denial-of-service conditions or execute arbitrary code.
Yes, the vulnerability has been fixed in Linux Kernel version v5.15 by commit f62314b1ced25c58b86e044fc951cd6a1ea234cf.
To update the Linux Kernel package, you can obtain the updated package from the official Linux Kernel repository and follow the installation instructions provided.
There are no known exploits for this vulnerability at the moment. However, it is important to promptly update the Linux Kernel to mitigate potential risks.
For more details about this vulnerability, you can refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
