CVE-2021-46937

MEDIUM

Linux Kernel 5.15-5.15.12 - Memory Leak in DAMON Debugfs Target IDs Write

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DAMON debugfs interface increases the reference counts of 'struct pid's for targets from the 'target_ids' file write callback ('dbgfs_target_ids_write()'), but decreases the counts only in DAMON monitoring termination callback ('dbgfs_before_terminate()'). Therefore, when 'target_ids' file is repeatedly written without DAMON monitoring start/termination, the reference count is not decreased and therefore memory for the 'struct pid' cannot be freed. This commit fixes this issue by decreasing the reference counts when 'target_ids' is written.

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (7)
Linux/Linux < 5.15
Linux/Linux 4bc05954d0076655cfaf6f0135585bdc20cd6b11 - ebb3f994dd92f8fb4d70c7541091216c1e10cb71
Linux/Linux 4bc05954d0076655cfaf6f0135585bdc20cd6b11 - ffe4a1ba1a82c416a6b3a09d46594f6a885ae141
Linux/Linux 5.15
Linux/Linux 5.15.13 - 5.15.*
Linux/Linux 5.16
linux/linux_kernel 5.15.0 - 5.15.13
Published Feb 27, 2024
Tracked Since Feb 18, 2026