Vulnerability in mm/mempolicy Package: mpol_new Leak in shared_policy_replace
Summary
GSD-2022-1001972: mm/mempolicy: fix mpol_new leak in shared_policy_replace. Affects Kernel versions >= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264, < f7e183b0a7136b6dc9c7b9b2a85a608a8feba894. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mm/mempolicy package is a component of the Linux Kernel that manages memory policies for processes. It provides functionality for controlling the allocation of memory based on policies defined by the user or system. The shared_policy_replace function in this package is responsible for replacing the memory policy of a shared memory object. However, a vulnerability has been discovered in this function that can lead to a memory leak.
Vulnerability Detail
The vulnerability in mm/mempolicy's shared_policy_replace function allows for a memory leak to occur. When replacing the memory policy of a shared memory object, the function fails to properly free the memory allocated for the new policy, resulting in a leak. This can lead to a gradual depletion of system memory resources, potentially causing performance degradation or denial of service conditions. The vulnerability was introduced in version v3.8 of the Linux Kernel and has been fixed in version v5.10.111.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to update the Linux Kernel to the fixed version.
Conclusion
The mm/mempolicy package in the Linux Kernel is vulnerable to a memory leak issue in the shared_policy_replace function. This vulnerability can be fixed by updating the Kernel to version v5.10.111 or later. No specific workaround is available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mm/mempolicy package is a component of the Linux Kernel that manages memory policies for processes.
The vulnerability can lead to a memory leak, gradually depleting system memory resources and potentially causing performance degradation or denial of service conditions.
To fix this vulnerability, update the Linux Kernel to version v5.10.111 or later.
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel is the recommended approach.
The vulnerability was introduced in version v3.8 of the Linux Kernel and fixed in version v5.10.111.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
