Memory Leak in ab8500_fg_sysfs_init in Kernel
Summary
GSD-2022-1002252: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init. Affects Kernel versions >= 8c0984e5a75337df513047ec92a6c09d78e3e5cd, < 41ed61364285ff38bbbe9ca8a45c8372ba72921d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionality, such as device drivers, memory management, and process scheduling. The ab8500 power supply driver is responsible for managing power-related operations on devices that utilize the ab8500 chip. This vulnerability specifically affects the ab8500_fg_sysfs_init function within the driver.
Vulnerability Detail
The ab8500_fg_sysfs_init function in the ab8500 power supply driver suffers from a memory leak. This vulnerability was introduced in version v4.9 of the Linux Kernel by commit 8c0984e5a75337df513047ec92a6c09d78e3e5cd and was fixed in version v5.4.189 by commit 41ed61364285ff38bbbe9ca8a45c8372ba72921d. When the ab8500_fg_sysfs_init function is called, it allocates memory for sysfs attributes but fails to deallocate it properly, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, resulting in a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can unload the ab8500 power supply driver module to prevent the vulnerable code from being executed. This can be achieved by running the following command as root:
$ rmmod ab8500
However, it is important to note that this workaround will disable power supply functionality for devices that rely on the ab8500 chip.
Conclusion
In conclusion, the ab8500_fg_sysfs_init function in the ab8500 power supply driver within the Linux Kernel suffers from a memory leak vulnerability. This can potentially result in a denial-of-service condition by depleting system memory resources. It is crucial to update the Kernel to version v5.4.189 or later to mitigate this vulnerability. Alternatively, users can unload the ab8500 power supply driver module as a temporary workaround, although this will disable power supply functionality for devices relying on the ab8500 chip. For further assistance, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can potentially lead to a denial-of-service condition by exhausting system memory resources.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the time of this report, there are no known exploits for this vulnerability. However, it is still important to apply the necessary updates to mitigate the risk.
As a temporary workaround, you can unload the ab8500 power supply driver module to prevent the vulnerable code from being executed. However, this will disable power supply functionality for devices that rely on the ab8500 chip.
For further support on vulnerability remediation, you can reach out to info@devnack.com. Our team of experts will be happy to assist you.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
