CVE

CVE-2021-46937

Severity:
MEDIUM
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/damon/dbgfs: fix &amp;#39;struct pid&amp;#39; leaks in &amp;#39;dbgfs_target_ids_write()&amp;#39;<br /> <br /> DAMON debugfs interface increases the reference counts of &amp;#39;struct pid&amp;#39;s<br /> for targets from the &amp;#39;target_ids&amp;#39; file write callback<br /> (&amp;#39;dbgfs_target_ids_write()&amp;#39;), but decreases the counts only in DAMON<br /> monitoring termination callback (&amp;#39;dbgfs_before_terminate()&amp;#39;).<br /> <br /> Therefore, when &amp;#39;target_ids&amp;#39; file is repeatedly written without DAMON<br /> monitoring start/termination, the reference count is not decreased and<br /> therefore memory for the &amp;#39;struct pid&amp;#39; cannot be freed. This commit<br /> fixes this issue by decreasing the reference counts when &amp;#39;target_ids&amp;#39; is<br /> written.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.0 (including) 5.15.13 (excluding)