Memory Leak Vulnerability in iommu/vt-d Package
Summary
GSD-2022-1000139: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping(). Affects Kernel versions >= c0c489e5430530a7021f4c889cd5931597e4b200, < a31cb1f0fb6caf46ffe88c41252b6b7a4ee062d9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/vt-d package is a component of the Linux Kernel that provides support for Input-Output Memory Management Unit (IOMMU) and Virtualization Technology for Directed I/O (VT-d). It enables secure and efficient device access in virtualized environments. The package is responsible for managing interrupt remapping for devices, ensuring proper isolation and protection. However, a vulnerability has been discovered in the package that could lead to a memory leak.
Vulnerability Detail
The vulnerability, identified as GSD-2022-1000139, resides in the intel_setup_irq_remapping() function of the iommu/vt-d package. It has the potential to cause a memory leak, which can result in the exhaustion of system resources over time. An attacker could potentially exploit this vulnerability to degrade system performance, cause denial of service, or even execute arbitrary code. The vulnerability was introduced in version v4.19.135 of the Linux Kernel and has been fixed in version v4.19.228.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.228 or later. This can be done by pulling the latest updates from the official Linux Kernel repository using the following command:
$ git pull https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
After updating the kernel, ensure that the system is rebooted to apply the changes.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The memory leak vulnerability in the iommu/vt-d package of the Linux Kernel can have serious consequences, including system resource exhaustion and potential code execution. It is crucial to update the Linux Kernel to version v4.19.228 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, potentially causing system resource exhaustion, degraded performance, denial of service, or arbitrary code execution.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it in real-time.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
The vulnerability itself does not provide remote exploitation capabilities. However, if an attacker already has access to the system, they could potentially leverage this vulnerability to escalate privileges or disrupt system operations.
This vulnerability is specific to the iommu/vt-d package in the Linux Kernel. There are no additional dependencies or prerequisites mentioned.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.