Fix I/O Page Table Memory Leak in iommu/amd
Summary
GSD-2022-1000693: iommu/amd: Fix I/O page table memory leak. Affects Kernel versions >= e42ba0633064ef23eb1c8c21edf96bac1541bd4b, < c78627f757e37c2cf386b59c700c4e1574988597. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The iommu/amd package is a component of the Linux Kernel that provides support for Input/Output Memory Management Units (IOMMU) on AMD processors. The IOMMU is responsible for mapping and managing memory access for devices connected to the system. It ensures that devices can only access the memory regions they are authorized to, enhancing system security and stability. However, a vulnerability has been discovered in the iommu/amd package that leads to a memory leak in the I/O page table. This can result in the exhaustion of system memory resources over time, potentially leading to system instability or denial of service.
Vulnerability Detail
The vulnerability in the iommu/amd package is caused by a memory leak in the I/O page table. When devices are mapped to memory regions, the corresponding page table entries are not properly deallocated when the mappings are removed. As a result, memory resources are not released, leading to a gradual depletion of available memory. Attackers could potentially exploit this vulnerability to exhaust system memory, causing system crashes or rendering the system unresponsive. The vulnerability was introduced in version v5.12 of the Linux Kernel and has been fixed in version v5.16.13.
How To Fix
No fixed version is published for this vulnerability.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.16.13 or later. This can be done by downloading the latest stable version of the Linux Kernel from the official repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and following the installation instructions provided. Alternatively, users can wait for their Linux distribution to release an updated package containing the fix.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel as mentioned above.
Conclusion
The iommu/amd package in the Linux Kernel is vulnerable to a memory leak in the I/O page table, which can lead to system instability or denial of service. It is recommended to update the Linux Kernel to version v5.16.13 or later to fix the vulnerability. No known workarounds are available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a gradual depletion of system memory, potentially causing system crashes or rendering the system unresponsive.
You can check the version of the Linux Kernel installed on your system. If it is version v5.12 or later, your system may be affected. It is recommended to update to version v5.16.13 or later to mitigate the vulnerability.
There are no known exploits for this vulnerability at the time of this report. However, it is important to apply the fix as soon as possible to prevent potential attacks.
No, this vulnerability cannot be exploited remotely. An attacker would need local access to the system to exploit the memory leak and exhaust system memory.
There is no evidence of active exploitation of this vulnerability at the time of this report. However, it is still important to apply the fix to ensure system security and stability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.