Vulnerability in Kernel package: mm/kmemleak: reset tag when compare object pointer
Summary
GSD-2022-1002270: mm/kmemleak: reset tag when compare object pointer. Affects Kernel versions < 35b72d8e2c8e324d26a06149e45416a02aa7aec8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and acts as a bridge between the hardware and software layers. The mm/kmemleak module within the Kernel package is responsible for detecting and tracking memory leaks in the kernel. It keeps track of allocated memory objects and identifies any potential leaks. However, a vulnerability has been discovered in the mm/kmemleak module that could lead to security issues.
Vulnerability Detail
The vulnerability in the mm/kmemleak module arises from a failure to reset the tag when comparing object pointers. This flaw could potentially allow an attacker to manipulate memory objects and cause memory corruption or other security breaches. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.4.189 by commit 35b72d8e2c8e324d26a06149e45416a02aa7aec8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the mm/kmemleak module of the Kernel package can potentially lead to memory corruption and other security breaches. It is crucial to update the Linux Kernel package to version v5.4.189 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system that provides core functionality and acts as a bridge between the hardware and software layers.
The mm/kmemleak module is a part of the Kernel package that detects and tracks memory leaks in the kernel.
The impact of this vulnerability is not yet proven, but it could potentially lead to memory corruption or other security breaches.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.4.189 by commit 35b72d8e2c8e324d26a06149e45416a02aa7aec8.
To update the Kernel package, you can pull the latest updates from the official Linux Kernel repository using the command: $ git pull https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
