Описание
In the Linux kernel, the following vulnerability has been resolved:
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
The memory allocated for pagerefs in fb_deferred_io_init() is not freed
on the error path. Fix it by calling fb_deferred_io_cleanup().
A flaw was found in the metronomefb framebuffer driver within the Linux kernel. This vulnerability occurs because memory allocated for page references is not properly released when an error occurs during initialization. A local attacker could potentially exploit this to cause a denial of service due to excessive memory consumption.
Отчет
A low-impact flaw was found in the metronomefb framebuffer driver in the Linux kernel. When an error occurs during metronomefb_probe() after fb_deferred_io_init() has allocated memory for deferred-I/O page references, that memory is not released because fb_deferred_io_cleanup() is not called on the error path. A local attacker able to trigger repeated failed probe attempts of a metronomefb device could exploit this flaw to consume excessive memory and cause a denial of service; there is no impact on confidentiality or integrity. Red Hat rates the impact of this flaw as Low because exploitation requires local access and the ability to reach the driver's initialization error path, and the consequence is limited to memory exhaustion. All currently tracked Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel, kernel-rt, and related streams are marked not affected for this flaw because the vulnerable code is not present in the shipped kernels.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefb_probe() The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().
In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefb_probe() The memory allocated for pagerefs in fb_deferred_io_init() is not freed on the error path. Fix it by calling fb_deferred_io_cleanup().
In the Linux kernel, the following vulnerability has been resolved: f ...
EPSS
5.5 Medium
CVSS3