Memory Leak in qib_user_sdma_queue_pkts() in Kernel
Summary
GSD-2021-1002772: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts(). Affects Kernel versions >= bda41654b6e0c125a624ca35d6d20beb8015b5d0, < 1ced0a3015a95c6a6db45e37250912c4c86697ab. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures the stability and security of the system. The qib_user_sdma_queue_pkts() function is part of the InfiniBand (IB) and Quadrics Interconnect (qib) subsystem in the Kernel, which handles communication between nodes in high-performance computing clusters. This function is responsible for queuing packets for transmission over the network.
Vulnerability Detail
The qib_user_sdma_queue_pkts() function in the Kernel suffers from a memory leak vulnerability. This vulnerability was introduced in version v4.4.292 of the Kernel by commit bda41654b6e0c125a624ca35d6d20beb8015b5d0 and fixed in version v4.4.297 by commit 1ced0a3015a95c6a6db45e37250912c4c86697ab. The vulnerability occurs when the function fails to release allocated memory, leading to a gradual depletion of system resources. An attacker could potentially exploit this vulnerability to exhaust available memory, causing system instability or denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The memory leak vulnerability in the qib_user_sdma_queue_pkts() function of the Kernel can potentially lead to system instability or denial of service. It is crucial to update the Kernel to version v4.4.297 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to system instability or denial of service due to memory exhaustion.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it in real-time.
At the time of this report, no known exploits have been documented for this vulnerability.
Yes, a patch has been released in version v4.4.297 of the Kernel.
No, this vulnerability requires a code fix in the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
