Wind River Support Network

HomeDefectsLIN1021-7414
Fixed

LIN1021-7414 : Security Advisory - linux - CVE-2021-46937

Created: Feb 27, 2024    Updated: Mar 1, 2024
Resolved Date: Feb 28, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'

DAMON debugfs interface increases the reference counts of 'struct pid's
for targets from the 'target_ids' file write callback
('dbgfs_target_ids_write()'), but decreases the counts only in DAMON
monitoring termination callback ('dbgfs_before_terminate()').

Therefore, when 'target_ids' file is repeatedly written without DAMON
monitoring start/termination, the reference count is not decreased and
therefore memory for the 'struct pid' cannot be freed.  This commit
fixes this issue by decreasing the reference counts when 'target_ids' is
written.

CREATE(Triage):(User=admin) CVE-2021-46937 (https://nvd.nist.gov/vuln/detail/CVE-2021-46937)
Live chat
Online