CVE-2021-46937
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/damon/dbgfs: fix &#39;struct pid&#39; leaks in &#39;dbgfs_target_ids_write()&#39;<br />
<br />
DAMON debugfs interface increases the reference counts of &#39;struct pid&#39;s<br />
for targets from the &#39;target_ids&#39; file write callback<br />
(&#39;dbgfs_target_ids_write()&#39;), but decreases the counts only in DAMON<br />
monitoring termination callback (&#39;dbgfs_before_terminate()&#39;).<br />
<br />
Therefore, when &#39;target_ids&#39; file is repeatedly written without DAMON<br />
monitoring start/termination, the reference count is not decreased and<br />
therefore memory for the &#39;struct pid&#39; cannot be freed. This commit<br />
fixes this issue by decreasing the reference counts when &#39;target_ids&#39; is<br />
written.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.15.0 (including) | 5.15.13 (excluding) |
To consult the complete list of CPE names with products and versions, see this page