Memory Leak Vulnerability in habanalabs
Summary
GSD-2022-1001704: habanalabs: fix possible memory leak in MMU DR fini. Affects Kernel versions < 12e49aefda2e04b07604f13e03f40027cbeb0dc6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The habanalabs package is a component of the Linux Kernel ecosystem. It provides support for Habana Labs AI accelerators. These accelerators are used for machine learning and artificial intelligence workloads. The package includes various drivers and modules to enable communication with the accelerators and manage their resources.
Vulnerability Detail
The identified vulnerability in habanalabs is related to a possible memory leak in the MMU DR fini function. This function is responsible for freeing up resources associated with the Memory Management Unit (MMU) of the AI accelerators. If the memory leak occurs, it can lead to a gradual depletion of available memory, potentially causing system instability or denial of service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The memory leak vulnerability in habanalabs can be addressed by updating the Linux Kernel to version v5.15.34 or a later one. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
habanalabs is a package in the Linux Kernel ecosystem that provides support for Habana Labs AI accelerators used for machine learning and artificial intelligence workloads.
The memory leak vulnerability in habanalabs can lead to a gradual depletion of available memory, potentially causing system instability or denial of service.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix the vulnerability, users should update their Linux Kernel to version v5.15.34 or a later one.
The Linux Kernel update can be obtained from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.