Intel PMC Core Memory Leak Vulnerability in Linux Kernel
Summary
GSD-2021-1002808: platform/x86: intel_pmc_core: fix memleak on registration failure. Affects Kernel versions >= 938835aa903ae19ad62805134f79bbcf20fc3bea, < 7a37f2e370699e2feca3dca6c8178c71ceee7e8a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The Intel PMC Core is a platform-specific driver in the x86 architecture that handles performance monitoring and control. It allows software to access performance monitoring counters and control the performance monitoring unit. However, a vulnerability has been discovered in the Intel PMC Core driver that can lead to a memory leak when registration fails.
Vulnerability Detail
The vulnerability in the Intel PMC Core driver occurs when registration fails, resulting in a memory leak. This means that if the driver fails to register properly, it does not release allocated memory, leading to a gradual depletion of system resources. An attacker could potentially exploit this vulnerability by repeatedly triggering the registration failure, causing a denial-of-service condition or even a system crash. The impact of this vulnerability depends on the specific system configuration and the availability of system resources. It is important to note that the actual attack plausibility and impact have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The Intel PMC Core Memory Leak Vulnerability in the Linux Kernel can lead to a gradual depletion of system resources if the driver fails to register properly. It is recommended to update the Linux Kernel to the latest version to mitigate this vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability depends on the specific system configuration and the availability of system resources. It could potentially lead to a denial-of-service condition or system crash.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for any open-source vulnerabilities, including this one.
No known exploit has been reported for this vulnerability at the moment. However, it is always recommended to apply security patches and updates to mitigate potential risks.
The vulnerability can potentially be exploited on systems running the affected versions of the Linux Kernel with the Intel PMC Core driver. The impact may vary depending on the system configuration and available resources.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2021-1002808 (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002808.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
