Memory Leak in ab8500_fg_sysfs_init in Kernel
Summary
GSD-2022-1002095: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init. Affects Kernel versions >= 8c0984e5a75337df513047ec92a6c09d78e3e5cd, < 879356a6a05559582b0a7895d86d2d4359745c08. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between hardware and software. It provides essential services and functions, including device drivers, memory management, and process scheduling. The ab8500 power supply driver is responsible for managing power-related operations on devices that utilize the ab8500 power management chip. This vulnerability specifically affects the ab8500_fg_sysfs_init function in the ab8500 power supply driver.
Vulnerability Detail
The ab8500_fg_sysfs_init function in the ab8500 power supply driver suffers from a memory leak vulnerability. This vulnerability was introduced in version v4.9 of the Linux Kernel by commit 8c0984e5a75337df513047ec92a6c09d78e3e5cd and was fixed in version v5.10.110 by commit 879356a6a05559582b0a7895d86d2d4359745c08. When the ab8500_fg_sysfs_init function is called, it fails to release allocated memory, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition or other unpredictable behavior.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the ab8500 power supply driver if it is not essential for their system's operation. This can be achieved by blacklisting the 'ab8500' module. To do this, add the following line to the '/etc/modprobe.d/blacklist.conf' file:
blacklist ab8500
After adding the line, save the file and reboot the system. Disabling the ab8500 power supply driver will prevent the vulnerable code from being executed.
Conclusion
In conclusion, the ab8500_fg_sysfs_init function in the ab8500 power supply driver of the Linux Kernel suffers from a memory leak vulnerability. This vulnerability can be mitigated by updating the Kernel to version v5.10.110 or later. Alternatively, users can temporarily disable the ab8500 power supply driver by blacklisting the 'ab8500' module. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to a denial-of-service condition or other unpredictable behavior due to the exhaustion of system memory resources.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Yes, a temporary workaround is to disable the ab8500 power supply driver by blacklisting the 'ab8500' module. Details on how to do this can be found in the 'workaround' section of this report.
At the time of this report, there are no known exploits for this vulnerability. However, it is still recommended to apply the necessary fix to mitigate any potential risks.
You can find more information about this vulnerability, including the fix commit and affected versions, in the vulnerability database maintained by the Cloud Security Alliance. The source link is provided in the 'affected' section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
