Memory Leak Vulnerability in perf hist
Summary
GSD-2021-1002558: perf hist: Fix memory leak of a perf_hpp_fmt. Affects Kernel versions < 5b5c6f57a1f81499db4c8ea597898cb1b87de0b6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The perf hist tool is a part of the Linux Kernel package. It is used for analyzing and displaying performance events in a histogram format. The tool allows users to view and interpret performance data collected by the kernel. However, a vulnerability has been discovered in the perf hist tool that can lead to a memory leak.
Vulnerability Detail
The vulnerability in perf hist is caused by a memory leak in the perf_hpp_fmt function. This function is responsible for formatting the output of the perf hist tool. Due to a coding error, memory allocated for the perf_hpp_fmt structure is not properly freed, resulting in a memory leak. An attacker can exploit this vulnerability by repeatedly executing the perf hist tool with specially crafted inputs, causing the memory leak to accumulate over time. This can lead to a depletion of system resources and potentially a denial-of-service condition. The vulnerability has been assigned the ID GSD-2021-1002558.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to update their Linux Kernel to the fixed version as soon as possible.
Conclusion
The memory leak vulnerability in perf hist can be fixed by updating the Linux Kernel to the latest version. Users are advised to apply the fix as soon as possible to prevent potential resource depletion and denial-of-service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
perf hist is a tool in the Linux Kernel package used for analyzing and displaying performance events in a histogram format.
A memory leak is a type of software bug where allocated memory is not properly freed, leading to a gradual depletion of available system resources.
The memory leak vulnerability in perf hist can result in a depletion of system resources and potentially a denial-of-service condition.
To fix this vulnerability, users should update their Linux Kernel to the latest version (v5.15.7).
There is no known workaround for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
