Memory Leak Vulnerability in perf hist
Summary
GSD-2021-1002444: perf hist: Fix memory leak of a perf_hpp_fmt. Affects Kernel versions < b380d09e44e8479e71e3ae8446b515a5b3166244. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The perf hist tool is a part of the Linux Kernel package, which is responsible for performance monitoring and profiling. It provides a way to analyze and display performance data in various formats. The tool uses a perf_hpp_fmt structure to format the output. However, a memory leak vulnerability has been identified in the perf_hpp_fmt implementation, which can lead to excessive memory consumption and potential resource exhaustion.
Vulnerability Detail
The memory leak vulnerability in perf hist occurs due to a failure to release memory allocated for the perf_hpp_fmt structure. This can be exploited by an attacker to consume large amounts of memory, potentially leading to a denial-of-service condition. The vulnerability has been fixed in Linux Kernel version v5.4.164 by commit b380d09e44e8479e71e3ae8446b515a5b3166244.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leak vulnerability in perf hist can be mitigated by updating the Linux Kernel package to version v5.4.164 or later. It is important to promptly apply the fix to prevent potential resource exhaustion and ensure the stability of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
perf hist is a performance monitoring and profiling tool in the Linux Kernel package. It allows users to analyze and display performance data in various formats.
A memory leak vulnerability occurs when a program fails to release memory it has allocated, leading to excessive memory consumption and potential resource exhaustion.
The memory leak vulnerability in perf hist can result in excessive memory consumption, potentially leading to a denial-of-service condition where system resources are exhausted.
Yes, the vulnerability has been fixed in Linux Kernel version v5.4.164 by commit b380d09e44e8479e71e3ae8446b515a5b3166244.
To update the Linux Kernel package, you can pull the latest changes from the official Linux Kernel repository using the 'git pull' command and then recompile and reinstall the kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
