Memory Leak Vulnerability in jffs2_scan_medium
Summary
GSD-2022-1001618: jffs2: fix memory leak in jffs2_scan_medium. Affects Kernel versions >= e631ddba588783edd521c5a89f7b2902772fb691, < b26bbc0c122cad038831f226a4cb4de702225e16. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The jffs2 module is a component of the Linux Kernel that provides support for the Journalling Flash File System 2 (JFFS2). JFFS2 is a file system specifically designed for use with flash memory devices. It offers features such as wear leveling and bad block management to ensure reliable storage on flash media. The jffs2_scan_medium function is responsible for scanning the medium and building the file system's internal data structures. However, a memory leak vulnerability has been discovered in this function.
Vulnerability Detail
The memory leak vulnerability in jffs2_scan_medium allows an attacker to exhaust system memory resources by repeatedly triggering the scanning process. By exploiting this vulnerability, an attacker could potentially cause a denial-of-service (DoS) condition on the affected system. The vulnerability was introduced in version v2.6.15 of the Linux Kernel and has been fixed in version v5.16.19.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the provided fix by updating the Linux Kernel.
Conclusion
The memory leak vulnerability in jffs2_scan_medium can be mitigated by updating the Linux Kernel to version v5.16.19 or later. This update includes the necessary fix to address the memory leak issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
JFFS2 is a file system designed for use with flash memory devices. It provides features such as wear leveling and bad block management to ensure reliable storage on flash media.
jffs2_scan_medium is a function in the jffs2 module responsible for scanning the medium and building the file system's internal data structures.
The memory leak vulnerability in jffs2_scan_medium can be exploited to exhaust system memory resources and potentially cause a denial-of-service (DoS) condition on the affected system.
The vulnerability was introduced in version v2.6.15 of the Linux Kernel. All versions up to and including v5.16.18 are affected.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.19 or later, which includes the necessary fix for the memory leak issue in jffs2_scan_medium.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
