PT-2021-8071 · Linux+2 · Linux Kernel+2
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the DAMON debugfs interface in the Linux kernel, which increases the reference counts of
struct pids for targets from the 'target ids' file write callback (dbgfs target ids write()), but decreases the counts only in DAMON monitoring termination callback (dbgfs before terminate()). When the 'target ids' file is repeatedly written without DAMON monitoring start/termination, the reference count is not decreased, and therefore, memory for the struct pid cannot be freed. This can lead to a memory leak. The vulnerability may allow an attacker to disclose protected information.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Exposure of Resource to Wrong Sphere
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linux Kernel
Red Os