PT-2018-2838 · Linux · Linux Kernel
Published
2018-12-03
·
Updated
2018-12-03
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a memory leak in the implementation of the i5100 init one handler in the Linux kernel, specifically in the drivers/edac/i5100 edac.ko module. This leak can occur during the initialization of the Intel 5100X Chipset Memory Controller Hub when an error is encountered, such as when the device with the PCI DEVICE ID INTEL 5100 19 identifier is not found. The memory allocated in the mci variable is not properly released when an error occurs in the pci get device func function, leading to a memory leak. An attacker could potentially exploit this issue to cause a denial of service by disabling the ADDI-DATA GmbH communication cards.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel