Memory Leak Vulnerability in coresight: syscfg
Summary
GSD-2022-1001935: coresight: syscfg: Fix memleak on registration failure in cscfg_create_device. Affects Kernel versions >= 85e2414c518a03a21dddd4bc88fec2723c5e1197, < c61e2fc87f24cae4701f352fe9ecd4c5c143106c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The coresight package is a component of the Linux Kernel that provides debugging and tracing capabilities for embedded systems. It includes various modules for managing system configuration, such as the syscfg module. The syscfg module allows devices to register with the system and provides a mechanism for managing their configuration. However, a vulnerability has been discovered in the syscfg module that can lead to a memory leak when device registration fails.
Vulnerability Detail
The vulnerability in the coresight: syscfg module occurs when a device fails to register with the system. In this scenario, the module does not properly release the allocated memory, resulting in a memory leak. This can lead to resource exhaustion and potential system instability. The vulnerability was introduced in version v5.15 of the Linux Kernel and has been fixed in version v5.15.33.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended solution is to update the Linux Kernel to the latest version.
Conclusion
In conclusion, the coresight: syscfg module in the Linux Kernel is vulnerable to a memory leak issue. This vulnerability can be mitigated by updating the kernel to version v5.15.33 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The coresight package is a component of the Linux Kernel that provides debugging and tracing capabilities for embedded systems.
The syscfg module is a part of the coresight package that allows devices to register with the system and manage their configuration.
The vulnerability can lead to a memory leak, resource exhaustion, and potential system instability.
To fix this vulnerability, update the Linux Kernel to version v5.15.33 or later.
No specific workaround is provided. Updating the Linux Kernel is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
