#VU89922 Memory leak in Linux kernel


Published: 2024-05-30

Vulnerability identifier: #VU89922

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-47499

CWE-ID: CWE-401

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the kxcjk1013_probe() and kxcjk1013_remove() functions in drivers/iio/accel/kxcjk-1013.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:


External links
http://git.kernel.org/stable/c/8c1d43f3a3fc7184c42d7398bdf59a2a2903e4fc
http://git.kernel.org/stable/c/60a55b9d91ba99eb8cf015bc46dc2de05e168a15
http://git.kernel.org/stable/c/3899700ddacbf7aaafadf44464fff3ff0d4e3307
http://git.kernel.org/stable/c/a3730f74159ad00a28960c0efe2a931fe6fe6b45
http://git.kernel.org/stable/c/8c163a14277115ca962103910ab4cce55e862ffb
http://git.kernel.org/stable/c/ee86d0bad80bdcd11a87e188a596727f41b62320
http://git.kernel.org/stable/c/14508fe13b1c578b3d2ba574f1d48b351975860c
http://git.kernel.org/stable/c/70c9774e180d151abaab358108e3510a8e615215


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability