Memory Leak Vulnerability in ipv6: fix memory leak in fib6_rule_suppress
Summary
GSD-2021-1002556: ipv6: fix memory leak in fib6_rule_suppress. Affects Kernel versions >= ca7a03c4175366a92cee0ccc4fec0038c3266e26, < 8ef8a76a340ebdb2c2eea3f6fb0ebbed09a16383. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is an essential component of the Linux operating system. It provides core functionality and acts as a bridge between the hardware and software layers. The package includes various modules and drivers that enable communication with hardware devices, manage system resources, and implement key operating system features. The vulnerability in question affects the ipv6 module within the Kernel package, specifically in the fib6_rule_suppress function.
Vulnerability Detail
The vulnerability is related to a memory leak issue in the fib6_rule_suppress function of the ipv6 module. When certain conditions are met, the function fails to release allocated memory, leading to a memory leak. This can result in a gradual depletion of available memory resources, potentially causing system instability or denial of service. The vulnerability was introduced in version v5.4 of the Linux Kernel and has been fixed in version v5.15.7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel package.
Conclusion
The memory leak vulnerability in the ipv6 module of the Linux Kernel package can lead to system instability or denial of service. It is crucial to update the package to version v5.15.7 or later to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing system instability or denial of service.
You can check the version of the Linux Kernel package installed on your system. If it is version v5.4 or later and does not include the fix commit (8ef8a76a340ebdb2c2eea3f6fb0ebbed09a16383), your system may be affected.
At the time of this report, no known exploits have been reported for this vulnerability. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
It is generally recommended to update the entire Linux Kernel package to ensure all relevant fixes and improvements are applied. Manual patching of specific vulnerabilities can be complex and may introduce compatibility or stability issues.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
