Memory Leak Vulnerability in ipv6: fix memory leak in fib6_rule_suppress
Summary
GSD-2021-1002487: ipv6: fix memory leak in fib6_rule_suppress. Affects Kernel versions >= ca7a03c4175366a92cee0ccc4fec0038c3266e26, < 209d35ee34e25f9668c404350a1c86d914c54ffa. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware, software, and processes. The package is responsible for managing system resources, including memory, processes, and device drivers. The vulnerability in question affects the ipv6 module within the Kernel package, which is responsible for handling IPv6 network traffic. This vulnerability specifically relates to a memory leak in the fib6_rule_suppress function, which can result in the consumption of excessive memory resources.
Vulnerability Detail
The memory leak vulnerability in fib6_rule_suppress within the ipv6 module of the Kernel package can lead to the gradual depletion of available memory resources. This can have various consequences, such as system slowdowns, instability, and potential denial-of-service scenarios. The vulnerability was introduced in version v5.4 of the Linux Kernel by commit ca7a03c4175366a92cee0ccc4fec0038c3266e26 and was fixed in version v5.10.84 by commit 209d35ee34e25f9668c404350a1c86d914c54ffa. The fix addresses the memory leak issue and prevents excessive memory consumption.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leak vulnerability in the ipv6 module of the Kernel package can lead to excessive memory consumption, system slowdowns, and potential denial-of-service scenarios. It is crucial to update the Kernel package to version v5.10.84 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in the gradual depletion of available memory resources, leading to system slowdowns, instability, and potential denial-of-service scenarios.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if the vulnerability is present.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel package to the fixed version.
At the time of this report, no known exploits have been reported for this vulnerability. However, it is crucial to apply the fix promptly to mitigate any potential risks.
You can refer to the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) for more details about the fix and the vulnerability. The commit history and release notes provide additional information.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
