Memory Leak Vulnerability in perf hist

Kernel Updated 02 Oct 2025

Summary

19/12/2021

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2021-1002416: perf hist: Fix memory leak of a perf_hpp_fmt. Affects Kernel versions < 24a139c105fa0f7f99888cf328bf6a02fc841675. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The perf hist tool is a part of the Linux Kernel package, which is responsible for collecting and analyzing performance data. It provides a way to display and format the recorded data in various formats. The vulnerability identified in perf hist is related to a memory leak issue in the perf_hpp_fmt function. This function is responsible for formatting the output of the perf hist tool. The memory leak occurs when the function is called multiple times without freeing the allocated memory, leading to a gradual depletion of system resources.

Vulnerability Detail

The memory leak vulnerability in perf hist can have several consequences. As the memory leak accumulates over time, it can result in increased memory usage and potential system instability. In extreme cases, it can lead to system crashes or denial-of-service situations. An attacker could potentially exploit this vulnerability by repeatedly triggering the perf hist tool, causing the memory leak to exhaust system resources and disrupt normal system operations. The vulnerability has been fixed in Linux Kernel version v4.19.220 by commit 24a139c105fa0f7f99888cf328bf6a02fc841675.

How To Fix

No fixed version is published for this vulnerability.

To fix the memory leak vulnerability in perf hist, it is recommended to update the Linux Kernel package to version v4.19.220 or later. This can be done by downloading the latest version of the Linux Kernel source code from the official repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the provided instructions. Alternatively, users can wait for their Linux distribution to release an updated package that includes the fix.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

There is no specific workaround available for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel package.

Conclusion

The memory leak vulnerability in perf hist can have serious consequences for system stability and performance. It is crucial to update the Linux Kernel package to the fixed version to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →