Vulnerability in Kernel: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
Summary
GSD-2022-1001812: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region. Affects Kernel versions >= 278d744c46fd4f1925aec77752d18a0e4a9cbec3, < bd4771ba2cf9e18473a42b5b70175e50d67a64bb. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a critical component of the Linux operating system that manages system resources and facilitates communication between hardware and software. It provides essential functions for the proper functioning of the system. The remoteproc subsystem in the Kernel is responsible for managing remote processors. The qcom_q6v5_mss driver is specifically designed for Qualcomm Q6v5 Modem Subsystem. This driver allows communication and control of the modem subsystem. However, a vulnerability has been discovered in the q6v5_alloc_memory_region function of the qcom_q6v5_mss driver, which can lead to memory leaks.
Vulnerability Detail
The q6v5_alloc_memory_region function in the qcom_q6v5_mss driver of the Kernel suffers from memory leaks. This vulnerability can be exploited by an attacker to exhaust system memory resources, leading to a denial-of-service condition. By repeatedly allocating memory regions without freeing them, an attacker can cause the system to run out of memory, resulting in degraded performance or system instability. The vulnerability was introduced in version v4.17 of the Kernel and has been fixed in version v5.15.33.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the Kernel's qcom_q6v5_mss driver can lead to memory leaks, potentially causing a denial-of-service condition. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.15.33 or later. This update includes the necessary fix to address the memory leaks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can lead to memory leaks, which can exhaust system memory resources and result in a denial-of-service condition. It can cause degraded performance or system instability.
An attacker can exploit this vulnerability by repeatedly allocating memory regions without freeing them, causing the system to run out of memory.
The vulnerability was introduced in version v4.17 of the Kernel. All versions between v4.17 and v5.15.32 are affected.
Yes, the vulnerability has been fixed in version v5.15.33 of the Linux Kernel.
No, there is no known workaround for this vulnerability. It is recommended to update the Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
