Memory Leak Vulnerability in perf bench futex
Summary
GSD-2021-1002264: perf bench futex: Fix memory leak of perf_cpu_map__new(). Affects Kernel versions >= 9c3516d1b850ea938b074df33e4c86d721c77720, < 9e0df711f8dbe5650ad4f557c12a5cb302432a37. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The perf bench futex is a performance benchmarking tool in the Linux Kernel. It is used to measure the performance of futex system calls. Futex is a fast user-space mutex implementation that allows for efficient synchronization between threads. The tool is commonly used for performance testing and analysis purposes. However, a memory leak vulnerability has been discovered in the perf bench futex tool.
Vulnerability Detail
The memory leak vulnerability in perf bench futex is caused by a failure to free memory allocated by the perf_cpu_map__new() function. This can result in a continuous allocation of memory without proper deallocation, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, causing a denial of service condition. The vulnerability was introduced in version v5.4 of the Linux Kernel and has been fixed in version v5.4.162.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The memory leak vulnerability in perf bench futex can be fixed by updating the Linux Kernel to version v5.4.162 or later. It is important to apply the fix to prevent potential memory leaks and denial of service conditions. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
perf bench futex is a performance benchmarking tool in the Linux Kernel used for measuring the performance of futex system calls.
A memory leak vulnerability occurs when memory is allocated but not properly deallocated, leading to a continuous consumption of memory resources.
The vulnerability can result in a memory leak, potentially exhausting system memory resources and causing a denial of service condition.
To fix the vulnerability, update the Linux Kernel to version v5.4.162 or later, applying the commit 9e0df711f8dbe5650ad4f557c12a5cb302432a37.
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
