Memory Leak in 'host1x_remove()' in Kernel
Summary
GSD-2022-1001216: gpu: host1x: Fix a memory leak in 'host1x_remove()'. Affects Kernel versions >= 8474b02531c4881a762c52ef869c52429e38633f, < fe1ce680560d4f0049ffa0c687de17567421c1ec. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages system resources and provides an interface for applications to interact with the hardware. It includes various subsystems, including the GPU subsystem. The GPU subsystem is responsible for managing graphics processing and acceleration. Within the GPU subsystem, the 'host1x' driver is used to communicate with the host processor and control the GPU hardware. However, a vulnerability has been discovered in the 'host1x_remove()' function, which can lead to a memory leak.
Vulnerability Detail
The vulnerability in the 'host1x_remove()' function of the 'host1x' driver in the Kernel can result in a memory leak. When this function is called to remove the 'host1x' driver, it fails to properly release allocated memory, leading to a gradual accumulation of unreleased memory. This can eventually exhaust system resources and cause performance degradation or even system instability. An attacker with local access to the affected system may be able to exploit this vulnerability to exhaust system resources and potentially launch denial-of-service attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can mitigate the impact of this vulnerability by avoiding the removal of the 'host1x' driver. By keeping the driver loaded, the memory leak issue in the 'host1x_remove()' function will not be triggered. However, this workaround may not be feasible in certain scenarios where the removal of the driver is necessary.
Conclusion
In conclusion, the 'host1x_remove()' function in the 'host1x' driver of the Linux Kernel is vulnerable to a memory leak issue. This vulnerability can be mitigated by updating the Kernel to version v5.17.2 or later. Users can also consider keeping the 'host1x' driver loaded as a workaround. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a memory leak, which can gradually exhaust system resources and cause performance degradation or system instability.
An attacker with local access to the affected system may be able to exploit this vulnerability.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
No, this vulnerability requires local access to the affected system.
Yes, updating the Linux Kernel to version v5.17.2 or later will address this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
