Lucene search

K
cve[email protected]CVE-2021-46937
HistoryFeb 27, 2024 - 10:15 a.m.

CVE-2021-46937

2024-02-2710:15:00
CWE-668
web.nvd.nist.gov
471
linux kernel
cve-2021-46937
mm/damon/dbgfs
security vulnerability
struct pid
dbgfs_target_ids_write
nvd
memory management

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.5%

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/dbgfs: fix ‘struct pid’ leaks in ‘dbgfs_target_ids_write()’

DAMON debugfs interface increases the reference counts of 'struct pid’s
for targets from the ‘target_ids’ file write callback
(‘dbgfs_target_ids_write()’), but decreases the counts only in DAMON
monitoring termination callback (‘dbgfs_before_terminate()’).

Therefore, when ‘target_ids’ file is repeatedly written without DAMON
monitoring start/termination, the reference count is not decreased and
therefore memory for the ‘struct pid’ cannot be freed. This commit
fixes this issue by decreasing the reference counts when ‘target_ids’ is
written.

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.5%