UBUNTU-CVE-2021-46937
Vulnerability Summary
Timeline
Description
In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' DAMON debugfs interface increases the reference counts of 'struct pid's for targets from the 'target_ids' file write callback ('dbgfs_target_ids_write()'), but decreases the counts only in DAMON monitoring termination callback ('dbgfs_before_terminate()'). Therefore, when 'target_ids' file is repeatedly written without DAMON monitoring start/termination, the reference count is not decreased and therefore memory for the 'struct pid' cannot be freed. This commit fixes this issue by decreasing the reference counts when 'target_ids' is written.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Systems
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-azure
all
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-gcp
all
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all
- ubuntu•linux-hwe-5.11
all
- ubuntu•linux-hwe-5.13
all
- ubuntu•linux-hwe-5.19
all
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-6.2
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-5.13
all
- ubuntu•linux-lowlatency-hwe-5.19
all
- ubuntu•linux-lowlatency-hwe-6.2
all
- ubuntu•linux-nvidia-6.2
all
- ubuntu•linux-oem
all
- ubuntu•linux-oem-5.10
all
- ubuntu•linux-oem-5.13
all
- ubuntu•linux-oem-5.14
all
- ubuntu•linux-oem-5.17
all
- ubuntu•linux-oem-5.6
all
- ubuntu•linux-oem-6.0
all
- ubuntu•linux-oem-6.1
all
Showing first 50 affected entries in server-rendered view.
References (5)
- https://ubuntu.com/security/CVE-2021-46937
- https://git.kernel.org/linus/ebb3f994dd92f8fb4d70c7541091216c1e10cb71
- https://git.kernel.org/stable/c/ffe4a1ba1a82c416a6b3a09d46594f6a885ae141
- https://git.kernel.org/stable/c/ebb3f994dd92f8fb4d70c7541091216c1e10cb71
- https://www.cve.org/CVERecord?id=CVE-2021-46937