Memory Leak in felix_setup_mmio_filtering in Kernel
Summary
GSD-2021-1002593: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering. Affects Kernel versions >= 8d5f7954b7c8de54902a8beda141064a7e2e6ee0, < 973a0373e88cc19129bd6ef0ec193040535397d9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functionality for the proper functioning of the system. One of the components in the Kernel is the felix_setup_mmio_filtering module, which is responsible for setting up memory-mapped I/O (MMIO) filtering in the DSA (Distributed Switch Architecture) driver. MMIO filtering allows for efficient packet forwarding in network switches. However, a memory leak vulnerability has been identified in the felix_setup_mmio_filtering module, which could lead to resource exhaustion and potential system instability.
Vulnerability Detail
The memory leak vulnerability in felix_setup_mmio_filtering module arises due to improper memory management. When the module is used to set up MMIO filtering, it fails to release allocated memory properly, resulting in a continuous accumulation of memory over time. This can eventually lead to resource exhaustion, causing system performance degradation or even crashes. An attacker could potentially exploit this vulnerability to exhaust system resources, leading to a denial-of-service (DoS) condition. The vulnerability was introduced in version v5.15 of the Linux Kernel and has been fixed in version v5.15.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid using the felix_setup_mmio_filtering module or disable MMIO filtering functionality if it is not essential for their network setup. This can be achieved by modifying the Kernel configuration or module loading parameters. However, it is recommended to apply the official fix by updating the Kernel to ensure comprehensive vulnerability mitigation.
Conclusion
The memory leak vulnerability in the felix_setup_mmio_filtering module of the Linux Kernel can lead to resource exhaustion and system instability. It is recommended to update the Kernel to version v5.15.8 or later to fix this vulnerability. Users can also use the Vulert Playground at https://vulert.com/scanner to check if their system is affected and receive real-time alerts for open-source vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to resource exhaustion, causing system performance degradation or crashes. An attacker could potentially exploit this vulnerability to launch a denial-of-service (DoS) attack.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Yes, users can avoid using the felix_setup_mmio_filtering module or disable MMIO filtering functionality if it is not necessary for their network setup. However, it is recommended to apply the official fix by updating the Kernel to ensure comprehensive vulnerability mitigation.
To update the Linux Kernel, you can obtain the latest version (v5.15.8 or later) from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/. Follow the installation instructions provided to update your Kernel.
At the time of this report, there are no known exploits for this vulnerability. However, it is crucial to apply the fix promptly to mitigate any potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
