Refcount Leak in dpaa2-ptp
Summary
GSD-2022-1001358: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe. Affects Kernel versions >= d346c9e86d8685d7cdceddf5b2e9c4376334620c, < 46d120f7c163706d6c31ee00baa0be64c4572b78. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The dpaa2-ptp package is a component of the Linux Kernel, specifically designed for the Data Path Acceleration Architecture 2 (DPAA2) Precision Time Protocol (PTP) functionality. DPAA2 is a hardware acceleration framework that provides high-performance packet processing capabilities. PTP is a protocol used for clock synchronization in distributed systems. The dpaa2-ptp package enables PTP functionality on DPAA2 hardware.
Vulnerability Detail
The vulnerability identified in dpaa2-ptp is a refcount leak issue that occurs during the probe process. When the dpaa2_ptp_probe function is executed, it fails to properly release the reference count on certain resources, leading to a memory leak. This vulnerability could potentially be exploited by an attacker to exhaust system memory resources, resulting in a denial-of-service condition. The vulnerability was introduced in version v5.3 of the Linux Kernel and has been fixed in version v5.16.20.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The dpaa2-ptp package in the Linux Kernel is vulnerable to a refcount leak issue, which can result in a denial-of-service condition. It is recommended to update the Linux Kernel to version v5.16.20 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
dpaa2-ptp is a package in the Linux Kernel that enables Precision Time Protocol (PTP) functionality on the Data Path Acceleration Architecture 2 (DPAA2) hardware.
A refcount leak refers to a situation where the reference count on a resource is not properly decremented, leading to a memory leak.
The vulnerability could be exploited by an attacker to exhaust system memory resources, causing a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version v5.16.20 or later.
You can obtain the updated Linux Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
