Memory Leak in vmbus_add_channel_kobj in Linux Kernel
Summary
GSD-2022-1000478: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj. Affects Kernel versions >= c2e5df616e1ae6c2a074cb241ebb65a318ebaf7c, < c377e2ba78d3fe9a1f0b4ec424e75f81da7e81e9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system. It provides essential services and functions to enable the proper functioning of the system. The vmbus driver in the Linux Kernel is responsible for facilitating communication between the host and virtual machines. It allows for the exchange of messages and data between the two entities. However, a vulnerability has been discovered in the vmbus_add_channel_kobj function, which can lead to a memory leak.
Vulnerability Detail
The vulnerability in vmbus_add_channel_kobj function in the vmbus driver of the Linux Kernel can result in a memory leak. When a channel object is added, the function fails to release the allocated memory if an error occurs during the process. This can lead to a gradual depletion of system memory, potentially causing performance degradation or even system instability. An attacker may be able to exploit this vulnerability to exhaust system resources, leading to a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can unload and reload the vmbus module to release the allocated memory. This can be done using the following commands:
rmmod hv_vmbus
modprobe hv_vmbus
However, it is important to note that this is only a temporary solution and updating the kernel is the recommended course of action.
Conclusion
In conclusion, the vmbus driver in the Linux Kernel is vulnerable to a memory leak in the vmbus_add_channel_kobj function. This can result in a gradual depletion of system memory and potential performance degradation or system instability. It is recommended to update the kernel to version v5.15.25 or later to address this vulnerability. If you have further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in a memory leak, leading to a gradual depletion of system memory. This can cause performance degradation and potentially result in system instability or a denial-of-service condition.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if the vulnerability is present.
Yes, a fix for this vulnerability is available in Linux Kernel version v5.15.25 or later. It is recommended to update the kernel to ensure the issue is resolved.
As a temporary workaround, you can unload and reload the vmbus module. However, this is not a permanent solution, and updating the kernel is the recommended approach.
There are no known instances of this vulnerability being actively exploited at this time. However, it is still important to apply the necessary updates and fixes to ensure the security and stability of your system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
