CVE-2021-46937
MEDIUMLinux Kernel 5.15-5.15.12 - Memory Leak in DAMON Debugfs Target IDs Write
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DAMON debugfs interface increases the reference counts of 'struct pid's for targets from the 'target_ids' file write callback ('dbgfs_target_ids_write()'), but decreases the counts only in DAMON monitoring termination callback ('dbgfs_before_terminate()'). Therefore, when 'target_ids' file is repeatedly written without DAMON monitoring start/termination, the reference count is not decreased and therefore memory for the 'struct pid' cannot be freed. This commit fixes this issue by decreasing the reference counts when 'target_ids' is written.
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0022
EPSS Percentile
12.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-668
Status
published
Products (7)
Linux/Linux
< 5.15
Linux/Linux
4bc05954d0076655cfaf6f0135585bdc20cd6b11 - ebb3f994dd92f8fb4d70c7541091216c1e10cb71
Linux/Linux
4bc05954d0076655cfaf6f0135585bdc20cd6b11 - ffe4a1ba1a82c416a6b3a09d46594f6a885ae141
Linux/Linux
5.15
Linux/Linux
5.15.13 - 5.15.*
Linux/Linux
5.16
linux/linux_kernel
5.15.0 - 5.15.13
Published
Feb 27, 2024
Tracked Since
Feb 18, 2026