Memory Leak Vulnerability in nfs Package
Summary
UVI-2021-1001419: nfs: fix acl memory leak of posix_acl_create(). Affects Kernel versions >= 013cdf1088d7235da9477a2375654921d9b9ba9f, < 8a2b308a54c5ec224fedc753617f99b29ffcd883. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nfs package is a component of the Linux Kernel ecosystem. It provides support for the Network File System (NFS), allowing remote file systems to be mounted and accessed over a network. NFS is widely used in distributed computing environments. The vulnerability in question is related to a memory leak issue in the posix_acl_create() function of the nfs package.
Vulnerability Detail
The vulnerability arises from a memory leak in the posix_acl_create() function of the nfs package. When creating an access control list (ACL), the function fails to release allocated memory, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, resulting in a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the nfs package in the Linux Kernel is vulnerable to a memory leak issue in the posix_acl_create() function. This vulnerability can potentially lead to a denial-of-service (DoS) condition. It is recommended to update the Linux Kernel to a version that includes the fix for this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The nfs package is a component of the Linux Kernel ecosystem that provides support for the Network File System (NFS), allowing remote file systems to be mounted and accessed over a network.
The impact of this vulnerability is the potential exhaustion of system memory resources, leading to a denial-of-service (DoS) condition. However, the actual impact and attack plausibility have not been proven.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.14.240 or later. The fix for this issue was implemented in commit 8a2b308a54c5ec224fedc753617f99b29ffcd883.
No specific workaround has been mentioned for this vulnerability.
For more details about this vulnerability, you can refer to the source link provided in the database_specific section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
