Memory leaks in perf report
Summary
GSD-2021-1002491: perf report: Fix memory leaks around perf_tip(). Affects Kernel versions < ff061b5bda73c4f785b4703eeb0848fd99e5608a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services required for the functioning of the operating system. The perf tool in the Linux Kernel is used for performance analysis and profiling. It collects and displays performance-related data. However, there is a vulnerability in the perf report component that leads to memory leaks.
Vulnerability Detail
The vulnerability in perf report is related to memory leaks around the perf_tip() function. This can result in the consumption of excessive memory resources, leading to performance degradation and potential denial-of-service attacks. The issue has been fixed in Linux Kernel version v5.10.84 by commit ff061b5bda73c4f785b4703eeb0848fd99e5608a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leaks in perf report have been fixed in Linux Kernel version v5.10.84. It is recommended to update the Linux Kernel to the fixed version to mitigate the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in memory leaks, leading to performance degradation and potential denial-of-service attacks.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for open-source vulnerabilities in real-time.
No specific workaround is mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
There are no known exploits for this vulnerability at the moment. However, it is important to apply the fix as soon as possible to prevent potential attacks.
You can refer to the commit ff061b5bda73c4f785b4703eeb0848fd99e5608a in the official Linux Kernel repository for more details about the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
